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Copyright 

Copyright © 2007 Nokia. All rights reserved. 

Reproduction, transfer, distribution or storage of part or all of the contents in this document in any form 
without the prior written permission of Nokia is prohibited. 

Nokia, Nokia Connecting People, and Nokia X and Y are trademarks or registered trademarks of Nokia 
Corporation. Other product and company names mentioned herein may be trademarks or tradenames of 
their respective owners. 

Nokia operates a policy of continuous development. Nokia reserves the right to make changes and 
improvements to any of the products described in this document without prior notice. 

Under no circumstances shall Nokia be responsible for any loss of data or income or any special, incidental, 
consequential or indirect damages howsoever caused. 

The contents of this document are provided "as is". Except as required by applicable law, no warranties of 
any kind, either express or implied, including, but not limited to, the implied warranties of merchantability 
and fitness for a particular purpose, are made in relation to the accuracy, reliability or contents of this 
document. Nokia reserves the right to revise this document or withdraw it at any time without prior notice. 

The availability of particular products may vary by region. 

IMPORTANT 

This document is intended for use by qualified service personnel only. 
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Warnings and cautions 
Warnings 

• IF THE DEVICE CAN BE INSTALLED IN A VEHICLE, CARE MUST BE TAKEN ON INSTALLATION IN VEHICLES FITTED 
WITH ELECTRONIC ENGINE MANAGEMENT SYSTEMS AND ANTI-SKID BRAKING SYSTEMS. UNDER CERTAIN FAULT 
CONDITIONS, EMITTED RF ENERGY CAN AFFECT THEIR OPERATION. IF NECESSARY, CONSULT THE VEHICLE DEALER/ 
MANUFACTURER TO DETERMINE THE IMMUNITY OF VEHICLE ELECTRONIC SYSTEMS TO RF ENERGY. 

• THE PRODUCT MUST NOT BE OPERATED IN AREAS LIKELY TO CONTAIN POTENTIALLY EXPLOSIVE ATMOSPHERES, 
FOR EXAMPLE, PETROL STATIONS (SERVICE STATIONS), BLASTING AREAS ETC. 

• OPERATION OF ANY RADIO TRANSMITTING EQUIPMENT, INCLUDING CELLULAR TELEPHONES, MAY INTERFERE 
WITH THE FUNCTIONALITY OF INADEQUATELY PROTECTED MEDICAL DEVICES. CONSULT A PHYSICIAN OR THE 
MANUFACTURER OF THE MEDICAL DEVICE IF YOU HAVE ANY QUESTIONS. OTHER ELECTRONIC EQUIPMENT MAY 
ALSO BE SUBJECT TO INTERFERENCE. 

• BEFORE MAKING ANY TEST CONNECTIONS, MAKE SURE YOU HAVE SWITCHED OFF ALL EQUIPMENT. 

Cautions 

• Servicing and alignment must be undertaken by qualified personnel only. 

• Ensure all work is carried out at an anti-static workstation and that an anti-static wrist strap is worn. 

• Ensure solder, wire, or foreign matter does not enter the telephone as damage may result. 

• Use only approved components as specified in the parts list. 

• Ensure all components, modules, screws and insulators are correctly re-fitted after servicing and 
alignment. 

• Ensure all cables and wires are repositioned correctly. 

• Never test a mobile phone WCDMA transmitter with full Tx power, if there is no possibility to perform the 
measurementsin a good performance RF-shielded room. Even low power WCDMA transmitters may disturb 
nearby WCDMA networks and cause problems to 3G cellular phone communication in a wide area. 

• During testing never activate the GSM or WCDMA transmitter without a proper antenna load, otherwise 
GSM or WCDMA PA may be damaged. 
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For your safety 

QUALIFIED SERVICE 

Only qualified personnel may install or repair phone equipment. 

ACCESSORIES AND BATTERIES 

Use only approved accessories and batteries. Do not connect incompatible products. 

CONNECTING TO OTHER DEVICES 

When connecting to any other device, read its user's guide for detailed safety instructions. Do not connect 
incompatible products. 
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Care and maintenance 

This product is of superior design and craftsmanship and should be treated with care. The suggestions below 
will help you to fulfil any warranty obligations and to enjoy this product for many years. 

• Keep the phone and all its parts and accessories out of the reach of small children. 

• Keep the phone dry. Precipitation, humidity and all types of liquids or moisture can contain minerals that 
will corrode electronic circuits. 

• Do not use or store the phone in dusty, dirty areas. Its moving parts can be damaged. 

• Do not store the phone in hot areas. High temperatures can shorten the life of electronic devices, damage 
batteries, and warp or melt certain plastics. 

• Do not store the phone in cold areas. When it warms up (to its normal temperature), moisture can form 
inside, which may damage electronic circuit boards. 

• Do not drop, knock or shake the phone. Rough handling can break internal circuit boards. 

• Do not use harsh chemicals, cleaning solvents, or strong detergents to clean the phone. 

• Do not paint the phone. Paint can clog the moving parts and prevent proper operation. 

• Use only the supplied or an approved replacement antenna. Unauthorised antennas, modifications or 
attachments could damage the phone and may violate regulations governing radio devices. 

All of the above suggestions apply equally to the product, battery, charger or any accessory. 
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ESD protection 

Nokia requires that service points have sufficient ESD protection (against static electricity) when servicing 
the phone. 

Any product of which the covers are removed must be handled with ESD protection. The SIM card can be 
replaced without ESD protection if the product is otherwise ready for use. 

To replace the covers ESD protection must be applied. 

All electronic parts of the product are susceptible to ESD. Resistors, too, can be damaged by static electricity 
discharge. 

All ESD sensitive parts must be packed in metallized protective bags during shipping and handling outside 
any ESD Protected Area (EPA). 

Every repair action involving opening the product or handling the product components must be done under 
ESD protection. 

ESD protected spare part packages MUST NOT be opened/closed out of an ESD Protected Area. 

For more information and local requirements about ESD protection and ESD Protected Area, contact your local 
Nokia After Market Services representative. 
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Battery information 

Note: A new battery's full performance is achieved only after two or three complete charge and 
discharge cycles! 

The battery can be charged and discharged hundreds of times but it will eventually wear out. When the 
operating time (talk-time and standby time) is noticeably shorter than normal, it is time to buy a new battery. 

Use only batteries approved by the phone manufacturer and recharge the battery only with the chargers 
approved by the manufacturer. Unplug the charger when not in use. Do not leave the battery connected to 
a charger for longer than a week, since overcharging may shorten its lifetime. If left unused a fully charged 
battery will discharge itself over time. 

Temperature extremes can affect the ability of your battery to charge. 

For good operation times with Ni-Cd/NiMh batteries, discharge the battery from time to time by leaving the 
product switched on until it turns itself off (or by using the battery discharge facility of any approved accessory 
available for the product). Do not attempt to discharge the battery by any other means. 

Use the battery only for its intended purpose. 

Never use any charger or battery which is damaged. 

Do not short-circuit the battery. Accidental short-circuiting can occur when a metallic object (coin, clip or 
pen) causes direct connection of the + and - terminals of the battery (metal strips on the battery) for example 
when you carry a spare battery in your pocket or purse. Short-circuiting the terminals may damage the battery 
or the connecting object. 

Leaving the battery in hot or cold places, such as in a closed car in summer or winter conditions, will reduce 
the capacity and lifetime of the battery. Always try to keep the battery between 15°C and 25°C (59°F and 77° 
F). A phone with a hot or cold battery may temporarily not work, even when the battery is fully charged. 
Batteries' performance is particularly limited in temperatures well below freezing. 

Do not dispose of batteries in a fire! 

Dispose of batteries according to local regulations (e.g. recycling). Do not dispose as household waste. 
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Company Policy 

Our policy is of continuous development; details of all technical modifications will be included with service 
bulletins. 

While every endeavour has been made to ensure the accuracy of this document, some errors may exist. If 
any errors are found by the reader, NOKIA MOBILE PHONES Business Group should be notified in writing/e- 
mail. 

Please state: 

• Title of the Document + Issue Number/Date of publication 

• Latest Amendment Number (if applicable) 

• Page(s) and/or Figure(s) in error 

Please send to: 

NOKIA CORPORATION 

Nokia Mobile Phones Business Group 

Nokia Customer Care 

P0Box86 

FIN-24101 SALO 

Finland 

E-mail: Service.Manuals@nokia.com 
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Nokia 8600 Service Manual Structure 

1 General information 

2 Service Tools and Service Concepts 

3 BB Troubleshooting and Manual Tuning Guide 

4 RF Troubleshooting and Manual Tuning Guide 

5 System module 
Glossary 
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■ Product selection 

The RM-164 phone is a quadband transceiver unit designed for the GSM850/900/1800/1900 networks, 
including EGSM. 




■ Product features 

Hardware characteristics 

MicroUSB for audio, data and charging (USB Version 2.0) 

Slide form factor 

Internal Bluetooth & GSM antenna with Quadband EGSM 850/900/1800/1900 

Class 2 and class 3 SIM ATK features 

Main display: QVGA 320x240, (24 bit) 16.7 million True Color TFT (active area 2") 

Codecs & file formats: AAC, AAC+, eAAC+, MP3, MP4, MIDI, AMR, H.263, H.264, MPEG4, WMA Audio, JPEG, BMP, 
PNG, GIF, 3GPP 

Over 100 MB of internal memory for user data 

Integrated 2.0 Megapixel camera with 4x digital zoom 

Integrated FM Radio and MP3 Player 

Integrated handsfree speaker 

Software and UI Features 

Demo mode (phone demo without SIM card) 

Flight mode (offline mode) 

FOTA: Firmware update over the air according OMA Device Management 1.2 (dependant on SW phone 
version and operator) 
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Macromedia Flash Lite 1.1 

Bluetooth version 2.0 + Enhanced data rate 
Bearers supported: 

Quadband EGSM 850/900/1800/1900 

HSCSD/CSD for browsing and as data modem 

GPRS (CS-4) and EGPRS (MSC-9) 
Applications/Service Enablers: 

xHTML over TCP/IP 

MMS 1.2 (600k MMS size) 

Java MIDP 2.0 applications and games 

A2DP BT Stereo audio streaming 

Nokia XPress audio messaging 

OMA Client provisioning 

E-mail client with attachments 

Ringtones: MP3, true tones & 64 polyphony MIDI 

Video ring tones & MP3 music files, AAC, AAC+ eAAC+, H.263, H.264, WMA Audio 

OMA (remote) synchronization/local synch Smart content download - OMA DRM 1.0 

Printing & Nokia XpressPrintvia Bluetooth 

Other features 

Camcorder and video player 

Themes including e.g. animated wallpapers and screensavers, ringing tones 

SIND Speaker independent name dialing on long press volume down key 

User configurable right soft key & GoTo menu 

Organizer with calendar, To-do list and notes 

Alarm clock, Countdown timer 

Zoom via Side-Vol key when Camera is active 

Accessories 





Table 1 Battery and chargers 


Type 


Name 


BP-5M 


Battery 900mAh Li-polymer 


AC-6 


Charger 


DC-6 
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Table 2 Car accessories 







N616 


Car kit 


N810 


CK-30W 


CK-20W 


CK-15W 


CR-39 


Car holder 


HF-33W 


Wireless plug-in car handsfree 


HF-34W 


HF-35W 


HF-6W 


HF-9W 



Table 3 Audio 







Name 




BH-900/ 
BH-902 


Bluetooth mono headset 


BH-700/ 
BH-701 


BH-800/ 
BH-801/ 
BH-803 


BH-600/ 
BH-602 


HS-12W 


Bluetooth stereo headset 


HS-39W 


BH-903 


HS-40 


Wired headset w microUSB adapter AD-55 


HS-47 


HS-60 


HS-81 


AD-55 


microUSB-Nokia AV audio adapter 
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■ Technical specifications 
General specifications 



Transceiver with BP-5M 
900mAh Li-polymer 
battery pack 



Dimension (mm) 



107x45x15.9 



Weight (g) 



Volume (cc) 



143 



70 



Battery endurance 



Battery 



BP-5M 900 mAh Li-polymer 



Talk time 



Standby time 



Upto3.7hrs 



Up to 10 days 



Note: Variation in operation times will occur depending on SIM card, network settings and usage. 
Talk time is increased by up to 30% if half rate is active, and reduced by 5% if enhanced full rate is 
active. 

Environmental conditions 

Temperature 



Temperature range 


1 


Operational (all specs met) 


-10 


+55 


Functional (reduced 
performance) 


-30 


+70 


Storage 


-30 


+85 



The HW module complies with the SPR4 Operating Conditions. 

Humidity 

Relative humidity range is 5. ..95%. 

The hardware module is not protected against water. Condensed or splashed water might cause malfunction. 
Any submerge of the phone will cause permanent damage. Long-term high humidity, with condensation, 
will cause permanent damage because of corrosion. 

The hardware module complies with the SPR4 Operating Conditions. 



Electrical characteristics 



Table 4 Normal and extreme voltages 



Voltage 




Voltage (V) 




Condition 


General conditions 


Nominal voltage 


4.0 




Lower extreme voltage 


3.4 


a 


Higher extreme voltage 


4.2 


b 
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Min operating voltage 


Voltage 


Voltage (v) 


Condition 


Voltage limit to leave Power Off 


2.95 +/- 0.1 


Off to On 


Voltage limit to enter Power Off 


2.5 +/- 0.1 


On to Off 



a. ADC settings in the SW might shutdown the phone above this value. 

b. During fast charging of an empty battery, this voltage might exceed this value. Voltages between 4.20 and 
4.60 might appear for a short while. 



Main RF characteristics 



Table 5 Channel numbers and frequencies 



System 


Channel number 


TX frequency 


RX frequency 


Unit 


GSM850 


128<=n<=251 


F = 824.2 + 0.2*(n- 128) 


F = 869.2 + 0.2*(n-128) 


MHz 


GSM900 


0<=n<=124 


F = 890 + 0.2*n 


F = 935 + 0.2*n 


MHz 




975 <=n<= 1023 


F = 890 + 0.2* (n- 1024) 


F = 935 + 0.2*(n -1024) 


MHz 


GSM1800 


512<=n<=885 


F = 1710.2 + 0.2* (n- 512) 


F = 1805.2 + 0.2*(n-512) 


MHz 


GSM1900 


512<=n<=810 


F = 1850.2 + 0.2* (n- 512) 


F = 1930.2 + 0.2*(n-512) 


MHz 



Table 6 Main RF characteristics 



Parameter 


Unit and value 


Cellular systems 


GSM850/EGSM900/GSM1800/GSM1900 


RX Frequency range 


GSM850: 869 ...894 MHz 


EGSM900: 925 ...960 MHz 


GSM1800: 1805...1880 MHz 


GSM1900: 1930...1990 MHz 


TX Frequency range 


GSM850: 824 ...849 MHz 


EGSM900:880... 915 MHz 


GSM1800: 1710 ...1785 MHz 


GSM1900: 1850...1910 MHz 


Duplex spacing 


GSM850:45MHz 


EGSM900:45MHz 


GSM1800: 95 MHz 


GSM1900:80MHz 


Channel spacing 


200 kHz 
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Parameter 


Unit and value 


Number of RF channels 


GSM850: 124 


EGSM900:174 


GSM1800: 374 


GSM1900:300 


Output Power 


GSM850:GSMK5...32.5dBm 


GSM850: 8-PSK 5...26.5 dBm 


EGSM900:GSMK5...32.5dBm 


EGSM900: 8-PSK 5...26.5 dBm 


GSM1800:GSMK0...30dBm 


GSM1800: 8-PSK 0...25.5 dBm 


GSM1900:GSMK0...30dBm 


GSM1900: 8-PSK 0...25.5 dBm 


Number of power levels GMSK 


GSM850: 15 


EGSM900:15 


GSM1800: 16 


GSM1900: 16 


Number of power levels 8-PSK 


GSM850: 12 


EGSM900: 12 


GSM1800: 14 


GSM1900: 14 



Table 7 Transmitter characteristics 



Item 


Values 


Type 


Direct conversion, nonlinear, FDMA/TDMA 


LO frequency range 


GSM850: 3296...3576 MHz (4 x TX freq) 


EGSM900: 3520...3660 MHz (4 x TX freq) 


GSM1800: 3420...3570 MHz (2 x TX freq) 


GSM1900: 3700...3820 MHz (2 x TX freq) 


Output power 

(GSM850/EGSM900/GSM1800/ 
GSM1900) 


GMSK 32.5/32.5/30/30 dBm 
8-PSK 26.5/26.5/25.5/25.5 dBm 


Gain control range 


GSMK 27/27/30/30 dB 
8-PSK 21/21/25/25 dB 


Phase error (RMS/peak), GMSK 


5 deg./20 deg. peak 


EVM (RMS/peak), 8-PSK 


10%/30% 
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Table 8 Receiver characteristics 







Type 


Direct conversion, Linear, FDMA/TDMA 


LO frequencies 


GSM850: 3476..3576 MHz (4 x RX freq) 


EGSM900: 3700...3840 MHz (4 x RX freq) 


GSM1800: 3610...3760 MHz (2 x RX freq) 


GSM1900: 3860...3980 MHz (2 x RX freq) 


Typical 3 dB bandwidth 


+/- 91 kHz 


Sensitivity 


GSMK-102dBm 
GPRS -99 dBm 
8-PSK-86dBm 


Total typical receiver voltage gain (from 
antenna to RX ADC) 


86 dB 


Receiver output level (RF level -95 dBm) 


40 mVpp, single-ended I/O signals to RX ADCs 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 1-11 



IMOKIA RM-164 

Care General information 



(This page left intentionally blank.) 



Page 1-12 COMPANY CONFIDENTIAL Issue 1 

Copyright © 2007 Nokia. All rights reserved. 



Nokia Customer Care 



2 — Service Tools and Service 

Concepts 



Issue 1 COMPANY CONFIDENTIAL Page 2 -1 

Copyright © 2007 Nokia. All rights reserved. 



IMOKIA RM-164 

Care Service Tools and Service Concepts 



(This page left intentionally blank.) 



Page 2 -2 COMPANY CONFIDENTIAL Issue 1 

Copyright © 2007 Nokia. All rights reserved. 



RM -164 IMOKIA 

Service Tools and Service Concepts Care 



Table of Contents 

Service tools 2-5 

CA-101 2-5 

CA-35S 2-5 

CU-4 2-6 

DAU-9S 2-7 

FLS-5 2-7 

FPS-10 2-7 

FS-52 2-8 

MJ-133 2-9 

PCS-1 2-9 

PK-1 2-10 

PKD-1 2-10 

RJ-167 2-10 

RJ-184 2-10 

RJ-18 2-10 

RJ-93 2-11 

SA-130 2-11 

SB-6 2-12 

SPS-1 2-12 

SRT-6 2-12 

SS-45 2-12 

SS-46 2-12 

SS-62 2-13 

SS-93 2-13 

ST-40 2-13 

ST-60 2-13 

ST-61 2-13 

SX-4 2-14 

XCS-4 2-14 

XRS-6 2-14 

Service concepts 2-15 

POS (Point of Sale) flash concept 2-15 

Flash concept with FPS-10 2-16 

CU-4 flash concept with FPS-10 2-17 

RF testing concept with RF coupler 2-18 

Service concept for RF testing and RF/BB tuning 2-19 

Module jig service concept 2-20 



List of Tables 

Table 9 Attenuation values for MJ-133 2-9 

Table 10 Attenuation values 2-11 



List of Figures 

Figure 1 Basic flash concept with FPS-10 2-16 

Figure 2 CU-4 flash concept with FPS-10 2-17 

Figure 3 RF testing concept with RF coupler 2-18 

Figure 4 Service concept for RF testing and RF/BB tuning 2-19 

Figure 5 Module jig service concept 2-20 

Issue 1 COMPANY CONFIDENTIAL Page 2 -3 

Copyright © 2007 Nokia. All rights reserved. 



IMOKIA RM-164 

Care Service Tools and Service Concepts 



(This page left intentionally blank.) 



Page 2 -4 COMPANY CONFIDENTIAL Issue 1 

Copyright © 2007 Nokia. All rights reserved. 



RM-164 

Service Tools and Service Concepts 



IMOKIA 

Care 



■ Service tools 

The table below gives a short overview of service tools that can be used for testing, error analysis and repair 
of product RM-164, refer to various concepts. 





CA-101 


Micro USB cable 




CA-101 

100cm ^^t^ 


The CA-101 is a USB-to-microUSB data cable that allows connections 
between the PC and the phone and also can be used to charge the 
phone from USB ports (PC suite needs to be installed in PC for charging 
via USB cable to work). 


U 


CA-35S 


Power cable 




CA-35S is a power cable for connecting, for example, the FPS-10 flash 
prommer to the Point-Of-Sales (POS) flash adapter. 
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CU-4 



Control unit 



CU-4 is a general service tool used with a module jig and/or a flash 
adapter. It requires an external 12 V power supply. 

The unit has the following features: 

software controlled via USB 

EM calibration function 

Forwards FBUS/Flashbus traffic to/from terminal 

Forwards USB traffic to/from terminal 

software controlled BSI values 

regulated VBATT voltage 

2 XUSB2.0 connector (Hub) 

FBUS and USB connections supported 

When using CU-4, note the special order of connecting cables and 
other service equipment: 

Instructions 



Connect a service tool fjig, flash adapter) to CU-4. 
Connect CU-4 to your PC with a USB cable. 
Connect supply voltage (12 V) 
Connect an FBUS cable (if necessary). 
Start Phoenix service software. 




Note: Phoenix enables CU-4 regulators via USB when it is 
started. 

Reconnecting the power supply requires a Phoenix restart. 
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DAU-9S 



MBUS cable 



The MBUS cable DAU-9S has a modular connector and is used, for 
example, between the PC's serial port and module jigs, flash adapters 
or docking station adapters. 

Note: Docking station adapters valid for DCT4 products. 




FLS-5 



Flash device 



FLS-5 is a dongle and flash device incorporated into one package, 
developed specifically for POS use. 




PS-10 



Flash prommer 



PS-10 interfaces with: 

PC 

Control unit 

Flash adapter 

Smart card 
PS-10 flash prommer features: 

Flash functionality for BB5 and DCT-4 terminals 

Smart Card reader for SX-2 or SX-4 

USB traffic forwarding 

USB to FBUS/Flashbus conversion 

LAN to FBUS/Flashbus and USB conversion 

Vusb output switchable by PC command 
PS-10 sales package includes: 

FPS-10 prommer 

Power Supply with 5 country specific cords 

USB cable 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 2 -7 



IMOKIA 

Care 



RM-164 
Service Tools and Service Concepts 




FS-52 



Flash adaptor 



FS-52 is an interface between a phone the SS-46 and/or the SS-62 
devices. It is used for testing, EM calibration and flashing assembled 
phones. 

Features include: 

• Used with SS-46 for phone flashing. 

• Used with CU-4 for flashing and management calibration. 

• Used with SA-130 RF coupler for go/no-go RF tests. 

• Easy phone attachment and detachment. 

• Reliable phone locking. 

• Replaceable test pins. 
Phone Mounting Instructions: 

1 At an angle, align the battery connector blades to adaptor battery 
connector clips. 

2 Ensure blades lock into adaptor clips. 

3 Carefully lower phone down while pulling pin lock lever back. 

4 Once phone is properly seated, release the locking pin lever to lock 
phone. 

5 Verify phone comes up in the chosen selected mode. 

Note: Always use adaptor lever before removing phone from 
adaptor, otherwise, adaptor locking pin could break. 
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MJ-133 




MJ-133 



Module jig 



The MJ-133 is used for component level troubleshooting of the RM-164 
engine board. It also allows engine testing, auto-tuning and 
troubleshooting. 

Mj-133 provides: 

• mechanical interface for engine module 

• connections to all needed test pads in module (except for RF) 

• permanent connection and locking of complete phone UI 

• IHF speaker 

Power is supplied via CU-4 (not part for MJ-133 sales pack) 

The following parts are also needed to use the MJ-133, but are not part 
of the MJ-133 sales pack: 

CU-4 (for powering the MJ-133) 
CA-56RS (for RF tuning and testing) 
RM-164 UI Module (for UI related tests) 
AD-55 Audio Adaptor (for Audio testing) 
Spare parts 

All test pins are replaceable. 
Flex assembly with connector. 
UI board with connector. 

Table 9 Attenuation values for MJ-133 



Band Tuning Atl 
Channel 


llKj 


■ f i i r 


jr. RX AttnTX Toler.TX 


GSM850 


190 


0.25 


+/-0.1 


0.2 


+/-0.05 


GSM900 


38 


0.3 


+/-0.05 


0.15 


-2 


GSM 
1800 


700 


0.4 


+/-0.05 


0.4 


-0.5 


GSM 
1900 


660 


0.4 


-2 


0.4 


+/-0.05 




PCS-1 



Power cable 



The PCS-1 power cable (DC) is used with a docking station, a module 
jig or a control unit to supply a controlled voltage. 
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PK-1 



Software protection 
key 



PK-1 is a hardware protection key with a USB interface. It has the same 
functionality as the PKD-1 series dongle. 

PK-1 is meant for use with a PC that does not have a series interface. 

To use this USB dongle for security service functions please register 
the dongle in the same way as the PKD-1 series dongle. 




PKD-1 



SW security device 



SW security device is a piece of hardware enabling the use of the 
service software when connected to the parallel (LPT) port of the PC. 

Without the device, it is not possible to use the service software. 

Printer or any such device can be connected to the PC through the 
device if needed. 




RJ-167 



Soldering jig 



This soldering jig is used for module level repair, either as fixation in 
uBGA rework places or when there is a need to hold a module on the 
work bench for any other repair. 

Features include: 

• Convenient locking mechanism 

• Four (optional mount) rubber feet allow usage also on repair 
benches 

• Fixation of phone module in both ways possible (bottom ortop side 
up) 

• ESD proof material 

• Standard uBGA jig thickness and outer dimensions 




RJ-184 



Rework jig 



RJ-184 is used as a rework jig for the engine module. 

This jig is used in conjunction with the ST-61 stencil for spreading the 
soldering paste to the B2201 component. 




RJ-18 



Rework jig 



RJ-18 is used as a rework jig for the engine module. 

This jig is used in conjunction with the ST-60 stencil for spreading the 
soldering paste to the D2300 component. 
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RJ-93 



Rework jig 



RJ-93 is used as a rework jig for the engine module. 

This jig is used in conjunction with the ST-40 stencil for spreading the 
soldering paste to the N7501 component. 




SA-130 



SA-130 



RF coupler 



The SA-130 coupler is for GSM RF Go/No Go testing. It interfaces with 
the FS-52 and SS-62/CU-4 interface adapters. It allows RF function 
testing in GSM bands of 850, 900, 1800 and 1900 MHz. 

Note: SA-130 is not suitable for RF tuning. 
• Table 10 Attenuation values 









TX Attn 
(dBm) 




RX Attn 
(dBm) 


GSM850 


Low 


824.2 


-16.1 


869.2 


-14.2 


Mid 


836.6 


-15.1 


881.6 


-13.4 


High 


848.8 


-14.9 


893.8 


-12.5 


EGSM 
900 


Low 


880.2 


-12 


925.2 


-12.8 


Mid 


897.6 


-11.8 


942.6 


-14.4 


High 


914.8 


-12.1 


959.8 


-17 


GSM 
1800 


Low 


1710.2 


-8.4 


1805.2 


-6.8 


Mid 


1747.6 


-7.5 


1842.6 


• -6.7 


High 


1784.8 


-6.9 


1879.8 


-6.5 


GSM 
1900 


Low 


1850.2 


-6.7 


1930.2 


-7.3 


Mid 


1880 


-6.5 


1960 


-8 


High 


1909.8 


-6.8 


1989.8 


-8.4 



TX attenuation tolerance is +/- 1.0 dB 
RX attenuation tolerance is +/- 1.0 dB 
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Bluetooth test and 
interface box (sales 
package) 



The SB-6 test box is a generic service device used to perform Bluetooth 
bit error rate (BER) testing, and establishing cordless FBUS connection 
via Bluetooth. An ACP-8x charger is needed for BER testing and an 
AXS-4 cable in case of cordless interface usage testing . 

Sales package includes: 

• SB-6 test box 

• Installation and warranty information 



SPS-1 



Soldering Paste 
Spreader 



The SPS-1 allows spreading of solder to the LGA components pads over 
the rework stencils. 




SRT-6 



Opening tool 



SRT-6 is used to open phone covers. 




SS-45 



Front camera 
removal tool 



The front camera removal tool SS-45 is used to remove/attach the 
front camera module from/to the socket. 




SS-46 



Interface adapter 



SS-46 acts as an interface adapter between the flash adapter and 
FPS-10. 
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SS-62 



Generic flash adapter 
base for BB5 



generic base for flash adapters and couplers 
SS-62 equipped with a clip interlock system 
provides standardised interface towards Control Unit 
provides RF connection using galvanic connector or coupler 
multiplexing between USB and FBUS media, controlled by VUSB 




SS-93 



Blue stick tool 



SS-93 is used for general disassembly and assembly tasks. 




ST-40 



Rework stencil 



ST-40 is a rework stencil and used with RJ-93. 




ST-60 



Rework stencil 



ST-60 is a rework stencil and used with RJ-18. 




ST-61 



Rework stencil 



ST-61 is a rework stencil and used with RJ-184. 
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SX-4 



Smart card 



SX-4 is a BB5 security device used to protect critical features in tuning 
and testing. 

SX-4 is also needed together with FPS-10 when DCT-4 phones are 
flashed. 




XCS-4 



Modular cable 



XCS-4 is a shielded (one specially shielded conductor) modular cable 
for flashing and service purposes. 




XRS-6 



RF cable 



The RF cable is used to connect, for example, a module repair jig to 
the RF measurement equipment. 

SMA to N-Connector approximately 610 mm. 

Attenuation for: 

• GSM850/900:0.3+-0.1dB 

• GSM1800/1900:0.5+-0.1dB 
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■ Service concepts 

POS (Point of Sale) flash concept 






ft 


•-T-, 


'■•■ 




■ 


Jl 
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1 
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< -- .■> 



PRODUCT SPECIFIC 
BATTERY 

TRANSCEIVER 



Type 


Description 




Product specific tools 


BP-5M 


Battery 


Other tools 


FLS-5 


POS flash dongle 




PC with Phoenix service software 


Cables 


CA-101 


Micro USB cable 
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Flash concept with FPS-10 



LAN Alternative connection to FPS-10 
* v via TCP/IP (LAN) or USB 



it 



USB 



PKD-1 



ill 



I 



PC, 



SW- 



FPS-10 



i 



SERVICE 
SOFTWARE 



XCS-4 



V 1 



@2£ 
TRANSCEIVER-, 




SS-46 



PRODUCT SPECIFIC 
FLASH ADAPTER 

46 



CA-35S 



Figure 1 Basic flash concept with FPS-10 





Description 




Product specific devices 


FS-52 


Flash adapter 


Other devices 


FPS-10 


Flash prommer box 


PKD-l/PK-1 


SW security device 


SS-46 


Interface adapter 




PC with Phoenix service software 


Cables 


XCS-4 


Modular cable 


CA-35S 


Power cable 




USB cable 
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CU-4 flash concept with FPS-10 



LAN Alternative connection to FPS-10 
v M via TCP/IP (LAN) or USB 




m^^^^^bh 



SX-4 



CU-4 

SS-62 
Figure 2 CU-4 flash concept with FPS-10 



Type 




Description 


Product specific devices 


FS-52 


Flash adapter 


Other devices 


CU-4 


Control unit 


FPS-10 


Flash prommer box 


PKD-l/PK-1 


SW security device 


SS-62 


Flash adapter base 


SX-4 


Smart card 




PC with Phoenix service software 


Cables 


PCS-1 


Power cable 


XCS-4 


Modular cable 




Standard USB cable 




USB cable 
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RF testing concept with RF coupler 



LAN Alternative connection to FPS-10 
v v via TCP/IP (UN) or USB 




Measurement 
equipment 



CU-4 
SS-62 
Figure 3 RF testing concept with RF coupler 



Type 




Description 




Product specific devices 


FS-52 


Flash adapter 


SA-130 


RF coupler 


Other devices 


CU-4 


Control unit 


SX-4 


Smart card 


FPS-10 


Flash prommer box 


PKD-l/PK-1 


SW security device 


SS-62 


Flash adapter base 




Measurement equipment 




PC with Phoenix service soft 


ware 


Cables 


PCS-1 


Power cable 


XCS-4 


Modular cable 


XRS-6 


RF cable 
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Type 



Description 



GPIB control cable 



USB cable 



Service concept for RF testing and RF/BB tuning 




Measurement 
equipment 



Figure 4 Service concept for RF testing and RF/BB tuning 



Type 


Descriptio 


1 


Product specific devices 


MJ-133 


Module jig 


Other devices 


CU-4 


Control unit 


PKD-l/PK-1 


SW security device 


SX-4 


Smart card 




Measurement equipment 




Smart card reader 




PC with Phoenix service software 


Cables 


DAU-9S 


MBUS cable 
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Type 




Description 




PCS-1 


DC power cable 


XRS-6 


RF cable 




GPIB control cable 




USB cable 



Module jig service concept 



GPIB 

Connect to PC 
via GPI8 card 



LAN Alternative connection to FPS- 10 
v via TCP/IP (LAN) or USB 




' / k 

Measurement 

equipment 



Figure 5 Module jig service concept 



Type 


Description 


Phone specific devices 


MJ-133 


Module jig 


Other devices 


CU-4 


Control unit 


FPS-10 


Flash prommer box 


PKD-l/PK-1 


SW security device 


SX-4 


Smart card 




PC with Phoenix service software 




Measurement equipment 
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Type 




Description 


Cables 


PCS-1 


DC power cable 


XCS-4 


Modular cable 


XRS-6 


RF cable 




USB cable 




GPIB control cable 
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■ Baseband troubleshooting overview 

This section is intended to be a guide for localising and repairing electrical faults. 
The table below tells you what troubleshooting to go to. 



Problem Troubleshooting 


Abnormal current consumption 


1 General power checking troubleshooting 
(page 3-6) 

2 Battery current measuring faulttroubleshooting 
(page 3-6) 


Flashing does notworkorthe problem is not clearly 
defined 


1 Flash programming faulttroubleshooting 
(page 3-16) 

2 Clocking troubleshooting (page 3-9) 

3 Combo memory troubleshooting (page 3-14) 


Charging does not work 


Charging troubleshooting (page 3-8) 


Display does not work 


Display troubleshooting (page 3-23) 


Backlights do not work 


1 Backlight troubleshooting (page 3-24) 

2 LED driver troubleshooting (page 3-25) 


USB does not work 


USB troubleshooting (page 3-49) 


Audio (mic, earpiece, IHF) does not work 


1 Audio troubleshooting (page 3-27) 

2 Acoustics troubleshooting (page 3-36) 


Camera does not work 


Camera troubleshootoing (page 3-11) 


Slide sensor detection 


MR sensor troubleshooting (page 3-27) 


Bluetooth does not work 


Bluetooth troubleshooting (page 3-39) 


FM radio does not work 


FM radio troubleshooting (page 3-18) 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 3 -5 



IMOKIA 

Care 



RM-164 
BB Troubleshooting and Manual Tuning Guide 



■ Power and charging troubleshooting 
General power checking troubleshooting 
Troubleshooting flow 



Switch power ON 



Supply voltage drops 

or current is large 

(> 400 mA) 

' 1 ' 



— OKI 



Is there short circuit inside some ASIC or in its load (e.g. 
from some regulator output to GND)? Also possibility of 
short circuit from VBAT (VBAT1, VBAT2, VBAT3, VBATCP 
or VBATH) to GND? Measure voltages after ferrites (L2204- 
L2208). 



NOK 




T 




( 




Is VBAT value 


inside 


phone (e.g. 


over 


C2310) below 


3.2V? 



— OKI 



Contact problems) also minor short circuit still possible) in 
the VBAT powering line which is too low. Check that VBAT 
line related components and their contacts to PWB (e.g. 
battery connector). Make sure that power supply voltage is 
large enough and current limit is high enough. 



NOK 

J_ 



Are PURX (TP7502) 

andRSTXJ2218) 

signals OK? 

PURX=1.8V, 

RSTX=VBAT) Measure 

before watchdog 

turns phone off. 



OK 



Is Tahvo's VCORE 
SMPS regulator 

working? 
(~1.4VatC2305)? 



•.Note: When RSTX is on 
\high level voltage should 
'•be same as VBAT 



-OK- 



— NOK*- 



Check L2300, C2302 

and C2306, and then 

change Tahvo if 

needed 



OK 



lsRETU'sVI0 1.8V(at 

C2236)? Measure K| 

before watchdog 
turns phone off. 



I^ 

NOK 

T 



Check BSI line 

voltage (R2210), 

-0.9V? 



— NOK*- 



Check BSI line 
related components 
and their powering 
and contacts (e.g. 
R2210 and also 
phone's battery) 



Check if VIO voltage 

is short circuited 

(possibly some 

components are 

heating up) 

' I 

OK 



—NOK* 



OK 



Replace RETU 
(D2200) 



Remove short circuit 



Check VDRAM (1.8V 
at C2237) voltage. 



OK 



— NOK* 



Go to clocking 
troubleshooting 



Check C2237 
soldering. 



NOK 



-NOKfc- 



Replace RETU 
(D2200) 



Solder/replace C2237 
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Battery current measuring fault troubleshooting 
Troubleshooting flow 



Note: If Phoenix current 

value = multimeter value 

=> OK. Tahvo is capable 

to measure -2...+2A 

range. 




YES- 



Change Tahvo 
N2300 



YES 



NO 



Try to make contact (e.g. 
by soldering) 



Make sure that there is 

current flow through 

resistor R3303. 



I 
-NO— ► Replace R3303. 
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Charging troubleshooting 
Troubleshooting flow 



Charging 
does not work 



T 



Connect Nokia 
approved charger 



I 



Battery bar 
(on display) 
is scrolling 



-NOK^ 



Display shows 
"Charger not 
Supported" 



OK 



— YES^ 



Resistance between 

J2063 and J2064 of < 

80 Ohms. 



-NOK^ 



Replace X2000 and 
Check 



NO 



NOK 

T 



LOK- 



Replace R2010 and 
N2000 







1' 












f \ 




f \ 








Check Voltage of 
J2061 > 4.2 V 


-NOK^ 


Check Fuse F2000, 

L2001 and Replace if 

needed. 


-NOK* 






V- J 




v. J 






















f \ 




Voltage over 
V2000 is > 3.0 VDC 




Check X2000, C2000, 




-NOK^ 


C2001 and replace if 
needed. 




V J 




^ J 




I 

OK 








T 




( \ 




Check R2005, C2000, 




L2000, C2018, R2015, 




R2002 




V J 













Replace X2000 and 
Check 
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Clocking troubleshooting 
Troubleshooting flow 




YES- 



Change RETU D2200 



YES 



System clock 
functionality OK a 

<RAPGSM input? 
J2800&J2801 => 

38.4MHz 
differential clock 



Change broken sleep 

oscillator part (e.g. 

B2200) 



Change Backup Battery 
(G3300) 



See Figure SYSCLK 



> 




YES 



-YES — 



Check Retu's VR1 voltage 

(C2235) 2.5V and system 

oscillator parts (G7501, 

R7510, C7522, R7511, C7523) 



Goto Combo memory 
troubleshooting 
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File Control Setup Measure Analyze Utilities Help 



3:25 PM 




Figure 6 SleepClk 



file Control Setup Measure Analyze Utilities Help 



3:33 PM 




Figure 7 SysClk 



Page 3 -10 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Issue 1 



RM-164 

BB Troubleshooting and Manual Tuning Guide 



IMOKIA 

Care 



■ Interface troubleshooting 

Camera failure 

Camera baseband hardware failure troubleshooting 

Troubleshooting flow 



Camera baseband 
hardware failure 



T 



VDIG at 
C6612 = 1.7 .. 1.9 V? 



I"NOkJ CeBIO^S.s'.VoV? I" N 



HW troubleshooting 
VBAT 



T 

OK 

_I_ 



Check (place, value) 
C6611,L6602 



Replace faulty 
component 



| OK 



Replace N6601 



I V2.8 at 

I C6609= 2.7 .. 



t 



Check (place, value) |— NOK^j Replace N6600 
ofC6608 



T 

OK 

T 



XSHUT (R6603) is 
high when camera is |— NOK^ 
turned on? 



OK 

_I_ 



3 Un 



RAPGSM defect. 
Swap phone. 



ExtClk (R660S) 

= 9.6 MHz when 

camera is turned on? 



OK 

_I_ 



( 1V2_OUTatC6614 ^ 

= 1.1 ..1.3 V when V-K 
I camera is turned on? I 



Replace HWA (D6600) 



T 

OK 

T 



l2C-levels at 

R3304.R3305 

= 0.. 1.8 V, 100 kHz? 



UnOK*J VIO = 1 .7 ..1 .9 V? Ul 
) \ , ) 



HW troubleshooting 
VIO 



OK 

I 



I 

OK 








» 




Replace 
R3304,R3305 


Check (place, value) ' 

R3304.R3305 
= 0.. 1.8 V, 100 kHz , 


-NOK*- 








OK 




RAPGSM defect. 
Swap phone 









CCP levels at 
& R2803. Common 
mode = 0.8 



gonj-NOK ^ R2804 n & e R 2803 ^ 

OK 



Replace 
R2804 & R2803 



± 



Replace HWA (D6600) 



l2C-levels at 

R6600 & R6601 

= 0.. 1.8 V, 400 kHz? 



— NOK*- 

J L 



Check 
R6600 & R6601 



Replace 
R6600 & R6601 



Replace camera 
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Camera viewfinder troubleshooting 
Troubleshooting flow 




Check & adjust display 
contrast 



Check viewfinder image 
using a real world target 



Image black 



No 



Yes 



Check & clean dirt on 

protection window or 

between window & camera 



Image OK? 



No 



Camera module possibly 
broken, change camera 



Image white 



No 



Yes 



Camera module possibly 
broken, change camera 



Image blurred 

but has color 

response 



No 



Yes 



Check & clean dirt on 

protection window or 

between window & camera 



Image OK? 



No 



Camera module possibly 
broken, change camera 



If viewfinder image exists but 

quality is poor check section 

"Bad Image Quality" 
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Camera: Bad image quality troubleshooting 
Troubleshooting flow 




Check & adjust display 
contrast 



protection window 
Check if protection 

window is faulty. 

change if needed 



No 



Image OK? 



Dirt or dots in 
image 



No 



Yes 



Check & clean dirt on 

protection window or 

between window & camera 



Image OK? 



No 



I 



Take uniform white 
test image, if black 
spots or dark areas 
exist, change camera 



Blurred image 



No 



Yes 



Check & clean dirt on 

protection window or 

between window & camera 



Image OK? 



No 



Try to change camera 

due to misfocused 

optics 



Viewfinder not 

responding 

correctly to 

color scene 

change 



No 



Yes 



Change camera 



Image OK? 



See hardware fault 
finding tree 



Data errors in 
image 



No 



Yes 



See hardware fault finding 
tree 



Analyze general image quality 

by using example images, 

change camera module if 

quality is unusual 
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COMBO memory troubleshooting 
Troubleshooting flow 



Note: If combo memory (D3000) is changed, certificate restoring must be carried out to make phone 

functional again. 




Possible RAPGSM fault. 

Goto dead or jammed 

device 
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File Control Setup Measure Analyze Utilities Help 



3:42 PM 




More 
(lor 2) 

Clear 
All 



current 
Frequency d») 119.27 MHz 
V anptd(l) 2.60 V 



59.115 MHz 
120 mV 



1 120.07 
1 3.27 V 



Figure 8 SDRAM CLK 
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Flash programming fault troubleshooting 
Parti 



Flash programming 
fault 



Check that 

programmed SW 

packages are correct 

and reflash phone. 

Reflashing succeed? 



?=►( END ) 



No 



T 



Note: Phoenix error 

codes helps to 

determine in what step 

flashing has failed 



Does the flashing 

procedure start at 

all? 



No 



I 



Measure FBUS TX 
line (J2063) after 

start up. 

Is FBUS TX high 

(2.5V) ? 



Yes 



Measure resistance 
from USB PORT pin3 

to J2064 & USB 
PORT pin2 to J2063. 
More than 40ohm? 

No W 



Yes 



Change USB 
ASIP(R2010) 



Measure internal 

FBUS TX line 

(J2302) after start up. 

Is it 1.8V? 



No 



Yes 



I 




Measure internal 

FBUS TX line 

(J2302) after start up. 

Is it 1.8V? 



No 



Yes 



Possible 

RAPGSM fault. 

Go to dead or 

jammed phone 

trouble shooting 



Measure BSI pulse 

(C2214) in flash 
programming start. 
Pulse (2.5V) seen? 



Yes 



E 



Check BSI line 

components C2214, 

R2210, R2211.R2070 

& C2075 and in case 

replace them 



Measure 

that PURX goes low 

after BSI pulse. 

OK? 



Yes I 




Measure FBUS TX 

line (J2063). Is FBUS 

TX set to low after it 

has been high? 




RAPGSM (D2800) fault) 



Yes 



E 



Wrong manufacturer 
ID and device ID? 



Yes 



No 



Change Combo 
memory (D3000) 



Does the flashing 
start? 



Yes 



t 



Go to dead or jammed 

phone 

troubleshooting 



Check the 

measurements with 

screenshots from 

Flash programming 

fault part 2 
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Part 2 



Bis 


Control Setup Measure Analyze Utilities Help 10:24 AM 


4 

11 
m 

IB 

M 

ISS 

More 
(1of2) 

Clear 
All 




m 
in 
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Figure 9 Flashing pic 1. Take single trig measurement for the rise of the BSI signal. 
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Figure 10 Flashing pic 2. Take single trig measurement for the rise of the BSI signal. 
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■ FM radio troubleshooting 
FM radio schematic 



Loop Filter £t VCO 



V« 



\ ':;.;;:: 



■CCn 
NO" 

3k:> 



= R61Q2 
DR 
INS _ ALLED 



Antenna matchinc 



D31D3 

man 



DR 
NOT_ NS'ALLED 



FM Radio IC 



Neioa 

TEA576CLKJV C 



_E4_j»J6100 




_J1 
-02 



DGND CPOJ- 
VjC 

LOOPS* 
DATA 
CLOCK 
BUSMODE 
BJSEN 
VREFDIG 

VAFR 
SWPORT VAFL 
"VJ"E 
FRF.QIN MPXOUT 




Audio 

OutDUt 



FM radio testing with headset 

Steps 

1. Connect the micro USB AV adapter to the headset (i.e. AD-55 with Nokia AV headset). 

2. Select Radio from the phone user interface Menu, then Media. 

3. In a FM Radio broadcast coverage area, set a local radio channel by scanning automatically through the 
Automatic tuning option. (Scanning up & down the channels by pressing the UP & DOWN key 
respectively). 

4. If no channel could be found, inspect all the components in the FM Radio circuitry. If no problem found 
visually, check the existence of the LO (by radiated pickup) near the VCO part of the FM Radio IC. If no LO 
found, replace the FM Radio IC. 

5. Listen for sound out of the Micro USB headset. 

If there is a signal present, continue on next slide. If there is no static sound present, inspect all FM Radio 
circuits on the PCB and refer to the baseband section on audio troubleshooting. 
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FM radio component layout 



Antenna matching 
corrmonents 



Audio coupling caps 




LO Freg = (Rx Freg+IF Freg) x 2 

IF Freg = 225kHz 

Example: 

Tune channel = (87.5+0.225)*2 MHz 

LO = 175.45MHz 



VCO 
resonant 

rirouit 
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FM radio troubleshooting 
Troubleshooting flow 



FM radio failure 



Note! A headset is needed to 

switch the radio on through the 

user interface. 



Switch radio on 
(Phone Ul or Phoenix) 



VAUX at 
R6105 = 2.78 V? 



OK 



NOK 


Replace 
RETU (D2200) 

and retest 





Sleepclk at 
J2217 = 32.8 kHz? 



NOK 



OK 



Go to Clocking 

troubleshooting 

(sleepclk 

functionality) 



Set FM radio to 87.5 MHz. 
VCOatL6100 = 175MHz? 



NOK 

— H 



Check L61 00 



NOK 



OK 



SetFM radio to 108 MHz. 
VCOatL6100 = 216MHz? 



NOK 



Replace 
L6100 

and retest 



OK 

— ► 



Replace 

FMchipN6100 

and retest 



OK 



Set FM generator to 

75 kHz deviation 

-80 dB level 

fmod= 1kHz sine 108 MHz 



OK 



Set phone to 108 MHz 
using phone Ul or Phoenix 



OK 



Check signal at C6110 and 
C6111 Is it 1 kHz sine 
wave 200.. 300 Vrms 

(565..850Vpp)? 



OK 



Check signal at 

C6110andC6111. 

Is it 1 kHz sine wave 

(amplitude varies with 

volume set in phone)? 



OK 



NOK 


f \ 

Replace N6100 and 
retest 

k. J 




















NOK 


f 

Check 
C6100.C6101 
R6100.R6101 

C6108 


) 


NOK 


Go to Audio 
troubleshooting 


► 





END 
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■ User interface troubleshooting 

Display module troubleshooting 

General instructions for display troubleshooting 

Context 

• The display is in a normal mode when the phone is in active use. 

• Display is in a partial idle mode when the phone is in the screen saver mode. 

• The operating modes of the display can be controlled with the help of Phoenix. 

Table 11 Display module troubleshooting cases 



Display blank 


There is no image on the display. The display looks 
the same when the phone is on as it does when the 
phone is off. The backlight can be on in some cases. 


Image on the display not correct 


Image on the display can be corrupted or a part of 
the image can be missing. If a part of the image is 
missing, change the display module. If the image is 
otherwise corrupted, follow the appropriate 
troubleshooting diagram. 


Backlight dim or not working at all 


Backlight LED components are inside the display 
module. Backlight failure can also be in the 
connector or in the backlight power source in the 
main engine of the phone. 

This means that in case the display is working 
(image OK), the backlight is faulty. 


Visual defects (pixel) 


Pixel defects can be checked by controlling the 
display with Phoenix. Use both colours, black and 
white, on a full screen. 

The display may have some random pixel defects 
that are acceptable for this type of display. The 
criteria when pixel defects are regarded as a display 
failure, resulting in a replacement of the display, are 
presented the following table. 



Table 1Z Pixel defects 



Item White dot defect Black dot Total 

defect 


1 


Defect counts 


R 


G 


B 


White Dot 
Total 


1 


1 


1 


1 


1 


1 


2 


Combined 
defect counts 


Not allowed. 

Two single dot defects that are within 5 mm of each other should be 
interpreted as combined dot defect. 
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Steps 

1. Verify with a working display that the fault is not on the display module itself. 
The display module cannot be repaired. 

2. Check that the cellular engine is working normally. 

i To check the functionality, connect the phone to a docking station. 

ii Start/ 7 /70e/7/)rservice software. 

iii Read the phone information to check that also the application engine is functioning normally (you 
should be able to read the APE ID). 

3. Proceed to the display troubleshooting flowcharts. 

Use the Display Test tool in PhoenixXa find the detailed fault mode. 
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Display troubleshooting 
Troubleshooting flow 



Display failure 



I 



Turn the backlight on 
with Phoenix 



I 



Make sure the 

display connector 

and B2B are properly 

connected. Check 

soldering of B2B 

connector. 



I 



Change to a 

known good 

display module 

and check display. 



-OK- 



I 

NOK 



Display is faulty 



Check backlight 



OK 

T 



-NOKH 



Go to backlight 
troubleshooting 



Test with new Ul 
assembly (Slide, flex 
and display). Check. 



NOK 

f 



-OK- 



Replace Flex and 
check 



-OK- 



Replace ASIP Z2400, 

Z2401 and check 

display image 



-OK- 



Replace faulty 

ASIP(s) and check 

display image 



-OK- 




NOK 



Beyond 

economical 

repair 
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Backlight troubleshooting 

Context 

The device has one LED driver that provides current for both display and keyboard backlights. Brightness can 
be adjusted manually. It affects both display and keypad. Keyboard backlights can be turned ON/OFF 
separately but not without switching on the display lights. 
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Display and keyboard backlight troubleshooting 



Display and 

keyboard backlights 

do not work as 

expected 



I 



Use Phoenix to turn 

on keypad and 

display. 



I 




Display backlights 
ON 



— OK^ 



Place Battery in 

phone, turn phone 

on. Slide phone -|— OK^ 

open. Bottom 

keypads on. 



Disassemble Ul flex 

connector and 

reconnect to main 

board. Check. 



- 1 

NOK 

Y 



— OK^ 




NOK 



Replace Flex 



«OK — 



NOK 




Directional keyboard 
Backlights on? 



I 

NOK 

▼ 



— OK^ 



Change Ul flex and 
check. 



Goto 

LED driver 

troubleshooting 



I 

NOK 

I 



Go to Display 
troubleshooting 



Test with new Ul 
assembly (Slide, flex 
and display). Check. 



I 

NOK^_ 



Change D2300 



NOK 



Directional Keypads 
LED's working? 



NOK 

T 



— OK»- 



Check transistor 
V2301 



NOK 

T 



Replace V2301 



Check voltage on 
R2313>2.3V 



- 1 

NOK 

T 



-OK«. 



Check N2300 



Check Voltage on 
J2310>2.3V 



I 
OK 

_I_ 



Change N2304 



NOK 

T 



Check R2307, R2309, 
R2306 
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LED driver troubleshooting 
Troubleshooting flow 




Lights cannot be 
turned ON 



I 



Lights cannot be 
turned OFF 



Disassemble the 

phone to the product 

specific module jig 



I 



Replace C2314 



Check for shorts on 
the LED chain (both 

display and 
keyboard), or from 
LED driver output 
(C2315) to ground. 



I 



▲ 
NOK 

_l_ 



I 



Disassemble the 

phone to the product 

specific module jig 



T 



Check voltage on 
C2314 >2.9V 



OK 

I 



Connect Phoenix to 

the phone, 

turn lights on 



I 



Visually check L2303 
& L2304 



Replace N2300 



T 

OK 



Connect Phoenix to 

the phone, turn lights 

off. 



NOK 

I 



Checkpin2ofV2303 
>1.7V 



— OK^ 



Check Voltage of 
C2313>2.9V 



Visually Check V2303 -^NOK— 



NOK 



i 



Checkpin2ofV2303 
<1.7V 



NOK 



1 



Replace N2300. 



OK 

J. 



NOK 

_J_ 



Replace V2303. 



"T" 

OK 



Replace N2301. 



Check Voltage of 
C2315>10V 



-OKI 



NOK 

T 



Replace Resistors. ^NOK — 



Visually Check 
R2301.R2302, R2303. 



Check voltage 
across R2308 > 8V. 



NOK 



-OKH 



Replace V2302. 



Check R2305, R2306, 
R2307, R2309. 



OK 



Replace V2301. 




OK 

T 



Replace N2301. 
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MR sensor (switch) troubleshooting 
Troubleshooting flow 



Problems with slide 
position detection 



I 



Disassemble the UI 

module and test with 

new UI assembly 

(Slide, flex and 

display). Check. 



— I— 
NOK 



—OKI 



Replace flex of the 
original UI module. 



Disassemble the 

phone and place it in 

the module jig. Check | — NOK^ 

that voltage on both 

sides of L2400 >2.6 V 



~r 

OK 

T 



Check L2400, R2402 
and C2401. 



— NOK^ 



OK 

T 



Replace Rapgsm 
(D2800) 



Replace L2400 — NOK^ 



Replace Retu (D2200) 



Replace faulty 
component. 



■ Audio troubleshooting 

Audio troubleshooting test instructions 

Differential external earpiece and internal earpiece outputs can be measured either with a single-ended or 
a differential probe. 
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When measuring with a single-ended probe each output is measured against the ground. 

Internal handsfree output is measured using a current probe, if a special low-pass filter designed for 
measuring a digital amplifier is not available. Note also that when using a current probe, the input signal 
frequency must be set to 2kHz. 

The input signal for each loop test can be either single-ended or differential. 

Required equipment 

The following equipment is needed for the tests: 

• Oscilloscope 

• Function generator (sine waveform) 

• Current probe (Internal handsfree PWM output measurement) 

• Phoenix service software 

• Battery voltage 3.7V 

Test procedure 

Audio can be tested using the Phoenix audio routings option. Three different audio loop paths can be 
activated: 

• External microphone to Internal earpiece 

• External microphone to Internal handsfree speaker 

• Internal microphone to External earpiece 

Each audio loop sets routing from the specified input to the specified output enabling a quick in-out test. 
Loop path gains are fixed and they cannot be changed using Phoenix. Correct pins and signals for each test 
are presented in the following table. 

Phoenix audio loop tests and test results 

The results presented in the table apply when no accessory is connected and battery voltage is set to 3.7V. 

Earpiece, internal microphone and speaker are in place during measurement. Applying a headset accessory 
during measurement causes a significant drop in measured quantities. 

The gain values presented in the table apply for a differential output vs. single-ended/differential input. 



Loop test 


Input 
terminal 


Output 
terminal 


Path gain 




UuTl 


Differential 
output 
voltage 


Output DC 
level [V] 


Output 
current 


















jVJjHjjl 




External Mic 
to External 
Earpiece 


MIC2P 
andGND 


D+, D-and 
GND 


-2.9 


1000 


720 


1.2 


NA 


External Mic 
to External 
Earpiece 


MIC2P 
andGND 


EAR.Pand 
GND 


-4 


750 


490 


1.2 


NA 


EAR_N 
andGND 


External Mic 
to Internal 
handsfree 


MIC2P 
andGND 


B2101 
pads 


8.5 


920 


2520 





25 mA 
(calc) 
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Loop test 


Input Output Path gain 
terminal terminal [dB] 

(fixed) 


Input 
voltage 
[mVp-p] 


Differential 
output 
voltage 
[mVp-p] 


Output DC 
level [V] 


Output 

current 

[mA] 


Internal Mic 
to External 
Earpiece 


IB2201 
(DATA / 
GND) 


D+, D-and 
GND 


22.7 


100 


1360 


1.2 


NA 



Measurement data 




Figure 11 Single-ended output waveform of the Ext_in_HP_out measurement when earpiece is connected. 



| Auto $> 
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Figure 12 Differential output waveform of the Ext_in_IHF_out out loop measurement when speaker is connected. 




Figure 13 Single-ended output waveform of the HP_in_Ext_out loop when microphone is connected. 
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Internal earpiece troubleshooting 
Troubleshooting flow 




Set Phoenix Audio Routing from 
a known working audio input 
Internal Mid or Mic2 (differential) 
to the differential internal 
earpiece output (EarP/EarN) 
according to the "Test 
instructions" chapter. 



Check the earpiece component 

and clean the PWB pads 

following the acoustics 

troubleshooting flowchart. 



OK. 



NOK 



Problem solved 



Check the signal path and DC- 
levels using Phoenix loop test 
according to the "Test 
instructions" chapter. 



Are audio signals from Retu to 

earpiece pads ok and DC levels 

correct? 



NOK 



OK 



Check the audio path between Retu 

and earpiece pads. 

Check 

R21 01 ,R21 02,C21 02,C21 03.L21 00. 

Replace components if needed. 



NOK 



Replace Retu. 

Retest and check 

levels 



NOK 



Replace 

RAPGSM. 

Retest and check 

levels. 



NOK 



Does audio work during a call 



NOK 



OK 



Replace 
RAPGSM. 




OK 



Problem solved 



Replace circuit 
board. 
Retest . 
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External earpiece troubleshooting 
Troubleshooting flow 



Problem in the 

external earpiece 

(headset) 



Set Phoenix Audio 

routing to Ext 

microphone in Ext 

speaker out and activate 

related audio paths if 

necessary. 



Check and clean the 
PopPort contacts. 

Replace PopPort if 
necessary. 




Check the signal path 

using Phoenix loop test 

according to the "Audio 

troubleshooting test 

instructions" section . 



Is the output signal and 

DC level as specified in 
'Tesf instructions"? 



NOK 



Check the audio path between 

Retu and HSEarR P/N and HSEar P/N pads. 

Check C2012,C2013,C2014,C2015 

R201 1 ,R201 2,L2003,L2004. 

Replace components if needed. 



NOK 



OK 



OK 



Replace 
Retu D2200 

and retest. 



OK 



NOK 



RAPGSM 

faulty. 

Beyond 

economical 

repair. 



Does audio work 
during a call 



OK 



NOK ^ 


RAPGSM 

faulty. 

Beyond 

economical 

repair. 





Problem solved 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 3 -31 



IMOKIA 

Care 



RM-164 
BB Troubleshooting and Manual Tuning Guide 



IHF troubleshooting 
Troubleshooting flow 



Problem in 

internal handsfree 

speaker (IHF) 



Set Phoenix Audio 

routing to Ext_in 

IHF_out mode and 

activate related audio 

paths if necessary. 



Check the speaker 
modules PWB 
connections. 



.•""Problem >v 
^v solved? >^ 



NO 



Check the signal path 

using Phoenix loop test 

according to the "Audio 

troubleshooting test 

instructions" section. 



Are audio signals from 

internal speaker pads to 

Retu D2200 ok? 



OK 





r 


Check L21 08, L2109, 


NOK^ 




R2114, R2115, C2108, 


► 


L2270, L2271,C2271, 






C2272, C2270 




K 





> Levels OK? 



NOK. 



Replace 
Retu D2200 

and retest 



OK 



OK 



Does audio work 
during a call? 



NOK. 



OK 



RAPGSM 

faulty. 

Beyond 

economical 

repair. 



NOK 



Problem solved 
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Internal microphone troubleshooting 
Troubleshooting flow 



Problem in the 
internal microphone 



Set Phoenix audio routing to 

HP_in_Ext_out mode and 

activate related audio paths if 

necessary. 



Check the microphone 

module and clean the 

PWB pads following the 

acoustics troubleshooting 

flowchart. 



Replace N2100 



Replace Rapgsm 
(D2800) 





Replace R2108 



Replace N2100 



Replace RapGSM 
(D2800) 



NO 



Replace B2201 




NO 



Replace R2108 



Yes 



Replace 
Rapgsm 
(D2800) 
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External microphone troubleshooting 
Troubleshooting flow 



Problem in 
external microphone 



Set Phoenix Audio 

routing to 
Ext_in_HP_out and 
activate related audio 

paths if necessary. 



Check and clean the 

Micro USB port. Replace 

Micro USB port if 

necessary. 




Measure DC-voltage from 
the L2002 against GND. 



Is the bias voltage 2.1 V 
measured from L2002? 



NOK 



Check C2010, C2011 and 
L2002. 



NOK 



Check C2006, 
C2007 R2008 
and R2007. 



NOK 



OK 



OK 



Check the signal path 

using Phoenix loop test 

according to the "Audio 

troubleshooting test 

instructions" section. 



OK 



Replace 
Retu D2200 

and retest. 



Replace 
R2009 



Is the output signal and 

DC level as specified in 

"Test instructions'"? 



NOK. 



Check 

C2008.C2009 

L2002 



NOK , 



OK 



OK 



Replace 
Retu D2200 

and retest. 



OK 



NOK 



RAPGSM 

faulty? 

Beyond 

economical 

repair. 



Does audio work 
during a call 



OK 



NOK _ 


RAPGSM 

faulty. 

Beyond 

economical 

repair. 





c 



Problem solved 



J 
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■ Acoustics troubleshooting 

Introduction to acoustics troubleshooting 

Note: Always make sure all openings are clean and all contact pads are intact and make contact. If 
audio still does not work, please continue to the electronic audio troubleshooting (2nd diagram 
where applicable). 

Acoustics design ensures that the sound is detected correctly with a microphone and properly radiated to 
the outside of the device by speaker(s). The acoustics of the phone includes three basic systems: earpiece, 
Integrated Hands Free (IHF) and microphone. 

The sound reproduced from the earpiece readiates through a single hole on the front cover (A-cover). The 
sound reproduced from the IHF speaker radiates from a single sound hole located 3 cm below the power key. 
The microphone is located at the hinge, next to the system connector. 

For a correct functionality of the phone, all sound holes must be always open. When the phone is used, care 
must be taken not to close any of those holes with a hand or fingers. The phone should be dry and clean, 
and no objects must be located in such a way that they close any of the holes. 
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Earpiece troubleshooting 
Troubleshooting flow 



Problem in 
earpiece 



Check that earpiece hole is open 



Remove 'Upper-Block A-cover' 
and 'Upper-Block Ul PWB' 



Check that nothing is affecting 
the dust protection material 



Check that the 'Earpiece Gasket' 

on the LCD frame is not 

damaged 



Remove 'LCD Display' and LCD 
Frame' from PWB 



Check that nothing is affecting 
the rear side of the earpiece 



Check 

that pad layout is not damaged or 

affected by corrosion 



Check 

that the component is working 

correctly and is well assembled 

in its place 
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IHF troubleshooting 
Troubleshooting flow 



Problem in IHF 



1 



Check 
that IHF hole is open 



Remove 
'Back-cover' and PWB 



Check 

that pad layout is neither 

damaged nor affected by 

corrosion 



Check 

that nothing is inside the IHF 

front and rear cavity 



Check 

that nothing is affecting the dust 

protection material 



Check that IHF gasket is not 
damaged 



Check 

that the component is working 

correctly and is well assembled 

in its place 
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Microphone troubleshooting 
Troubleshooting flow 



Problem in 
microphone 



Check 
that microphone hole is open 



Remove 
Back-cover' and PWB 



Check 

that pad layout is neither 

damaged nor affected by 

corrosion 



Remove 
microphone module 



Check 
that nothing is inside the 
microphone front cavity 



Check 

that the module is working 

correctly and is well assembled 

in its place 
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■ Connections troubleshooting 
Bluetooth troubleshooting 

Introduction to Bluetooth troubleshooting 

There are two main Bluetooth (BT) problems that can occur: 



33 



Detachment of the BT antenna. 



cription 



This would most likely happen if the device has 
been dropped repeatedly to the ground. It could 
cause the BT antenna to become loose or partially 
detached from the PWB. 



A malfunction in the BTASIC, BB ASICs orthe phone's 
BTSMD components. 



This is unpredictable and could have many causes 
i.e. SW or HW related. 



The main issue is to find out if the problem is related to the BT antenna or related to the BT system or the 
phone's BB and then replace/fix the faulty component. For location of the antenna, please refer to the 
exploded view in the Parts and layouts section. 

Bluetooth schematic 



i.M !i: I < > 



;..:.- > 



Bluetooth 

ASIC 
W Rnnn 



38.4 MHz 
Ref Clock 
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Bluetooth DC and RF test points 



SAW Filter 



Bluetooth ASIC 



VDD COR 



Xtaljn 

38.4MHz 





: 220 

-- £ -■ +22Z2£lmimm 

.::m 



Bluetooth 
Antenna 




Bluetooth settings for Phoenix 

Steps 

1. Start Phoenix service software. 

2. From the File menu, choose Open Product, and then choose the correct type designator from the 
Product list. 

3. Place the phone to a flash adapter in the local mode. 

4. Choose Testing— >Bluetooth LOCALS . 

5. Locate JBT-9's serial number (12 digits) found in the type label on the back of JBT-9. 
In addition to JBT-9, also SB-6, JBT-3 and JBT-6 Bluetooth test boxes can be used. 

6. In the Bluetooth LOCALS window, write the 12-digit serial number on the 
Counterpart BT Device Address line. 

This needs to be done only once provided that JBT-9 is not changed. 

7. Place the JBT-9 box near (within 10 cm) the BT antenna and click Run BER Test. 

Results 

Bit Error Rate test result is displayed in the Bit Error Rate (BER) Testspane in the Bluetooth Z0C4Z5" window. 
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•'. Bluetooth LOCALS 



^]nJi<J 



BT Software Operational Mode- 



~3 



Scan Mode 



I - Inquiry Mode 
I - Page Mode 



Bit Error Rate (BER) Tests- 
Counterpart BT Device Address: 

Bit Frames: 






|00e0031eeS1b 


300 




Hop Mode: 


Europe/USA 


Test Done: 




OK 


Number of Bits 




64800 


%Bit Error Rate: 




0.03% 


Result: 




OK 






Start 







Self Tests- 



Self Test Name 



I Result 



ASIC-Data RAM 
Flash 

ASIC-REG access 
RF-Harmonic alignment 



Unknown 
Unknown 
Unknown 
Unknown 



Run 



Version Information 



Field 


| Value 


MCM Software 


06cc 


Locals Software 


HCI Ver = 0x3, HCI Rev 


Checksum 


93be 


Hardware Version 


0330 


Release Date 


27VI0\2004 


Prod Code 


41B141A 


Prod Code Basic 


bc4 — 1 


Manufacturer 


CSR 


HW Release Date 


01\05\2004 ^J 


<1 I 


iT 



Read 



Close 



Help 



Figure 14 BER test result 



Bluetooth Phoenix and test setup 



Steps 

1. Go to the Testing menu, select Bluetooth Locals. 

Note: If BER tests had been running previously, you must re-start BT Locals before performing the 
Self Tests. 

If the / 7 /70e/7/)f connection to the phone's BT ASIC is OK, you will see text displayed in the Version 
Information window, such as MCM Software, MM Software. 
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•'. Bluetooth Locals 



jnjxj 



BT Software Operational Mode - 



N ornnal 



~3 



Scan Mode — 
I - Inquiry Mode 
V Page Mode 



-Bit Error Rate (BER) Tests 
Counterpart BT Device 

Bit Frames: 


Address: 






|00e00324b744 


300 




Hop Mode: 




Europe/USA 


Test Done: 






OK 


Number of Bits 






64800 


%Bit Error Rate: 






0.0CE 


Result: 






OK 








Start 







Self Tests- 



Self Test Name 



1 Result 



ASIC-Data RAM 

Flash 

ASIC-REG access 

RF-Harmonic alignment 



Pass 
Pass 
Pass 

Pass 



Run 



Version Infoirnation- 



Field 



j Value 



MCM Software 
MM Software 
Checksum 
Device Address 
Hardware Version 



SW-V:0348 
FHL 05w21 PA 



0012372E5FF7 
0003 






Read 






Close 



Help 



If "No version information available" is present in the Version Information window, it might either be a 
/ 7 /70cV7/)rconnection problem BT ASIC or the BT ASIC is notworking. See case lin Bluetooth troubleshooting 
(page 3-45). 

After getting the version information, click Run to do a quick check on the BT ASIC. The results of each 
self-test will display in the Se/fTests\N\ndo\N. If any test fails, BT ASIC is not working properly. Change BT 
ASIC. 

After passing the self-test, setup the SB-6 BT box, key in the BT box's device address into 
Counterpart BT Device Address. 

Click Run BER Test to run the BER loopback test. 

See the BER result in the BER Test Results window. Since this is a "go no-go" testing, make sure the test- 
jig / coupler is set up right. It is recommended to run a couple of "good" phones in order to get better 
correlation. The acceptance criteria is BER<0.1%. 

If the phone's BT sensitivity is not good or if the setup is not calibrated (correlated) right, you will see the 
%BER > 0.1% which results in Error. Go back to make sure the setup is correct (correlated with a golden 
phone), then see case 2 in Bluetooth troubleshooting (page 3-45). 

If the phone is placed too far away or the BT TX or RX has problem, you might see the following error 
message. See case 2 of Bluetooth troubleshooting (page 3-45). 
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^JnJilJ 



BT Software Operational Mode 
[Normal _^J 



P" Inquiry Mode 
I - Page Mode 



-Bit Error Rate (BER) 
Counterpart BT D 

Bit Frames: 


Tests 
evice 


Address: 






|00e00324b744 


300 




Hop Mode: 






Europe/USA 


Test Done: 








OK 


Number of Bits 








64B00 


KBil Error Rate: 








15.11% 


Result: 








Error 










Start 







Self Test Name 



I Result | 



ASIC-Data RAM 

Flash 

ASIC-REG access 

RF-Harmonic alignment 



Pass 
Pass 
Pass 



< An error has occurred in Bluetooth Locals 




© 



An error occured while trying to retrieve the results of the Bit Error 

Rate (BER) test. 

This problem could have occurred because the product wasn't 

physically connected, the product needs to be restarted, turned on or 

put into the correct mode, a valid connection hasn't been made in 

Phoenix or the software on the product doesn't support the requested 

operation. 

HRESULT 0x80004005 (-21474G7259) 
T his means: 
Unspecified error 



Help 




Bluetooth self tests in Phoenix 

Steps 

1. Start Phoenix service software. 

2. ChooseFile— >Scan Product. 

3. Place the phone to a flash adapter. 

4. From the Mode drop-down menu, set mode to Local. 

5. Choose Testing^Self Tests. 

6. In the Self Tests window check the following Bluetooth related tests: 

• ST_LPRF_IF_TEST 

• ST_LPRF_AUDIO_LINES_TEST 

• ST_BT_WAKEUP_TEST 

• ST BT SLEEP CLK TEST 
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7. To run the tests, click Start. 



£ Self Tests 



Start 



Close 



^InjxJ 





tests — 














Test Name 


Startup Test 


Result 


Detailed 




□ 


ST_CURRENT_CONS_TEST 


Yes 


Passed [0] 




□ 


ST_EAR_DATA_LOOP_TEST 


Yes 


Passed [ ) 




□ 


9T! KEYBOARD_STUCK_TEST 


Yes 


Passed [ ] 




□ 


StfsiM_CLK_LOOP_TEST 


Yes 


Passed [0] 




D 


ST_SIM_IO_CTRL_LOOP_TEST 


Yes 


Passed [0] 




□ 


ST_SLEEP_X_LOOP_TEST 


Yes 


Passed [0] 




□ 


ST_BACKUP_BATT_TEST 


No 


Passed [0] 




•y 


ST_LPRFJF_TEST 


No 


Passed [0] 




a 


ST_CAMERA_IF_TEST 


No 


Timeout [13] 




□ 


ST SIM LOCK TEST 


Yes 


Passed [0] 




□ 


ST_USB_CHARGING_TEST 


No 


Failed [ 1 ] 




□ 


ST_RADIO_TEST 


Yes 


Passed [0] 




y 


ST_LPRF_AUDIO_LINES_TEST 


No 


Passed [0] 




□ 


ST_UEM_CBUS_IF_TEST 


Yes 


Passed [0] 




□ 


ST SLEEPCLK FREQ TEST 


Yes 


Passed [0] 




□ 


ST_BACKLIGHT_TEST 


Yes 


Passed [ ] 




' 


ST_BT_WAKEUP_TEST 


No 


Passed [0] 




D 


ST_CDSP_TXC_DATA_TEST 


No 


Passed [0] 




□ 


ST_CDSP_GSM_TX_POWER_TEST 


No 


Passed [0] 




□ 


ST_CDSP_RX_PLL_PHASE_LOCK_TEST 


No 


Passed [ ] 




□ 


ST_CDSP_TX_PLL_PHASE_LOCK_TEST 


No 


Passed [0] 




□ 


ST CDSP RX IQ LOOP BACK TEST 


No 


Passed [0] 




□ 


ST_CDSP_RF_SUPPLY_TEST 


No 


Passed [0] 




□ 


ST_CDSP_TX_IQ_TEST 


No 


Passed [0] 




□ 


ST CDSP RF BB IF TEST 


No 


Passed [0] 




D 


ST_TAHVOINT_TEST 


Yes 


Passed [0] 




□ 


ST_SECURITY_TEST 


Yes 


Passed [0] 




□ 


ST_HOOKINT_TEST 


No 


Passed [0] 




□ 


ST_BTEMP_TEST 


No 


Passed [ ] 






□ ST_8T_SLEEP_CLK_TEST 


No 


Passed ( ] 






ST_EXT_DEVICE_TEST 


No 


Passed [ ] 
































initialize 


|| Details 


| UnselectAII | 


Select All 


I 

















Help 



Figure 15 Bluetooth self tests in Phoenix 
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Bluetooth troubleshooting 
Troubleshooting flow 



Bluetooth 
troubleshooting 

lease- 1 1 




Bluetooth RF 

Iroublesliootlng 

Ifitat 2) 




1 








r 














Perform visual 

Inspection of all BT 

components 


-HOKt. 


RofilMM damagou 1 
component or solder 




Chock flEft usiivg BT 
te^itfaoK 


-rKWC- 


Roolacs BTflllor 
ZoDOt 


-NQK* 


ftoplaco &7 
Airterwia WfiQM 


-NOR* 


ftoplau BT ft-SIC 
M600(J 


1 

OK 






















f ^ 

CfiectVOO Core at 
RHJ09-1.SV 

I J 


Ok— 1» 


Replace BT ASIC 
MttCOO 




1 

T 












Check VCTOCO 
C60OC 3S.t MHZ 
Blgim -sot mVpp 

V -J 


-NOKp 


Check VCTCXO 

RT514 3B.4 MHz 

slgnji-SM mVpp 


-VOK*. 


Go Id 66 TE 




1 
OK 




1 

OK 
1 








R*(*iC»N5WJ 




R*plac*V75W 





Bluetooth BER failure troubleshooting 

Context 

Basic encoding rules, BER, is a self-identifying and self-delimiting encoding scheme, which means that each 
data value can be identified, extracted and decoded individually. 
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Part 1: Bluetooth self test passed but BER test failed 



Bluetooth 

BER failure 

Parti 



I 



Visually check BT 

antenna. Is it 

attached properly to 

the mechanics? 



-NOK^ 



Replace 
BT antenna 



OK 



l 



Try to make a 

connection to the BT 

box. 



-NOK^ 




Check RF matching 

components/soldering: 

R6002,L6000 

L6001,L6002 

C6001 



— OK^ 



Replace 

Balanced Filter 

Z6000 



-NOK^ 



Go to BT 

troubleshooting 

part 2 



Bluetooth OK 
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Part 2: Bluetooth self test failed 



Bluetooth 

BER failure 

part 2 



Check VIO_1V8_BTH 

(of N6000) at C6009 

with oscilloscope. 

VREG = 1.8VDC? 



-NOK*- 



VBAT at 
L6003 = 4 V? 

Replace if faulty and 
check VBAT again. 



-NOK*- 



X 



Goto 
General power 

checking 
troubleshooting 



OK 



Check VIO(C2236) 
with oscilloscope. 
VIO = 1.8VDC? 



OK 



Goto 
General power 

checking 
troubleshooting 



Check SYSCLK (R6005)i 

with oscilloscope. 

SYSCLK Vin > 400 

mVpp & 38.4 MHz? 

(Use FET probe) 



-NOr>- 



OK 



Check clock BT buffer 

(with o-scope) 

FET probe. 

Clocksignal V > 400 
mVpp (R6005) 

1 

OK 

I 



-NOK*- 



rn: 



Check RF 
troubleshooting of 
VCTCXO section. 
Replace if faulty. 



Check 

C6000 

Replace if faulty. 

Check SYSCLK again. 



Run 
Bluetooth self test 



-NOK*- 



Replace 
BT ASIC (N6000) 



OK 



Check SleepClk R6007 

with oscilloscope 

32.768 kHz 1.8 Vpp 

I 

OK 
I 



Goto 

Clocking 

troubleshooting 



Try to make a 

connection to the BT 

box. 



-NOK>- 



Goto 

Bluetooth 

troubleshooting 

part 1 




— NOH>- 



Goto 

Bluetooth 

troubleshooting 

part 1 
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Bluetooth audio and UI activation troubleshooting 
Troubleshooting flow 



BT activation via UI/ 
BT audio failure 



I 



Turn on the phone 

and activate BT via 

phone UI 



OK 

T 



The message 
"Unable to perform M -n#w 
BT operation" r~ N0K *H 
appears? 

v , ' 

OK 



Go to section 

Bluetooth settings 

for Phoenix 



Perform Phoenix BT self tests. 

1. Put phone in Local mode 

2. Go to Testing menu 

3. Choose Self tests 

4. Choose and Run following: 
ST_LPRF_IF_TEST 
ST_LPRF_AUDIO_LINES_TEST 
ST_BT_WAKEUP_TEST 
ST_BT_Sleep_CLK_TEST 



OK 

T 



Are the self tests 
passed? 



OK 



~T" 

NOK 

T 



Replace 
BT ASIC 
(N6000) 
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USB troubleshooting 
Troubleshooting flow 



USB FAULTS 



'onnect phone to 
'PC with known goocT 

Monaco USB. PC 

^recognizes phone as^ 

USB device? 



Yes 



Customer's cable broken. 
END 



No 



Check microUSB 
connector (X2000). 
Change it if needed. 




Yes 



Change USB ASIP(R2010) 



No 



Yes 



Change L2001 and 
check /change 
C2312, N2001, 
F2000, R2000, 
C2004, V2001, 
C2003 




No 



Yes 



Check C2303 and Tahvo 
(N2300) 




No 



Yes 




No 



Change Tahvo (N2300) 
and test USB connection 



END 
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■ Baseband manual tuning guide 
Certificate restoring for BB5 products 

Context 

This procedure is performed when the device certificate is corrupted for some reason. 

All tunings (RF & Baseband, UI) must be done after performing the certificate restoring procedure. 

The procedure for certificate restoring is the following: 

• Flash the phone with the latest available software using FPS-10. 

• Create a request file. 

• Send the file to Nokia by e-mail. Use the following addresses depending on your location: 

• APAC: sydney.service@nokia.com 

• CHINA: repair.ams@nokia.com 

• E&A: salo.repair@nokia.com 

• AMERICAS: flsl.usa@nokia.com 

When you receive a reply from Nokia, carry out certificate restoring. 
Tune the phone completely. 

Note: SX-4 smart card is needed. 

If the phone resets after certificate restoring, reflash the phone again. 

Required equipment and setup: 

Phoen/x service software v 2004.39.7.70 or newer. 

The latest phone model specific Phoenixdata package. 

PKD-ldongle 

SX-4 smart card (Enables BB5 testing and tuning features) 

FPS-10 flash prommer 

Flash update package 03.18.004 or newer for FPS-10 flash prommer 

CU-4 control unit 

USB cable from PC USB Port to CU-4 control unit 

Phone model specific adapter for CU-4 control unit 

PCS-1 cable to power CU-4 from external power supply 

XCS-4 modular cable between flash prommer and CU-4 

Note: CU-4 must be supplied with +12 V from an external power supply in all steps of certificate 
restoring. 

Steps 

1. Program the phone software. 

i Start Phoenixar\c\ login. Make sure the connection has been managed correctly for FPS-10. 
ii Update the phone MCU software to the latest available version. 

If the new flash is empty and the phone cannot communicate with Phoenix, reflash the phone, 
iii Choose the product manually from File— >Open Product , and click OK. 

Wait for the phone type designator (e.g. "RM-1" ) to be displayed in the status bar. 
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iv Go to Flashing Firmware Update and wait until Phoen/xreads the product data as shown in the 
following picture. 



© 



re Update 



hing Method — 
C Restore User Ptoduct 

(* Phone As Manufactured / Refurbish 



Product information 
Product Code: | 



SW version: 



V Dead phone USB flashing 



Output 



Lj 



Start 



Options 



Close 



-Inlxi 



J 



"3 



J 



Help 



v To continue, click Start. 

Progress bars and messages on the screen show actions during phone programming, please wait. 
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"are Update 



□ xl 



hing Method 
C Restore User Product 

(* Phone As Manufactured / Refurbish 



Product information 
Product Code: 



J 



SW version: 



|"~ Dead phone USB flashing 



Output 



~H 



Lj 



s 



Start 



Options 



Close 



Help 



Programming is completed when Flashing Completed message is displayed. 

The product type designator and MCU SW version are displayed in the status bar. 
vi Close the Firmware Update window and then choose File^Close Product . 
Create a ReqruestfWe. 

For this procedure, you must supply +12 V to CU-4 from an external power supply, 
i To connect the phone with Phoenix, choose File^Scan Product . 
ii Choose Tools— ^Certificate Restore . 
iii To choose a location for the request file, click Browse. 



XA Certificate Restore 



JE1 



Action 
<• Generate a request file 

(~~ Erocess a response file 



Place for request file 
Filename: 



Browse 



Place for response fife— 

Filename: | 



Browse 



Start Close 



Help 
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iv Name the file so that you can easily identify it, and click Open. 



Look in: 








*= e a- a- 




| _J IMEI 




d 








\ 1 

BOB 




r 


File name: 

Files of type: 










|004400281S52824| 




~ 3 [ 


Open 








Cancel 


| Ask files (".ask) 




d 


f Open as read-only 






/a 





The name of the file and its location are shown. 



fa£ Certificate Restore 



Action 
(• generate a request file 

C Process a response file 



Place for request file 



Filename: C:\Temp\IMEI\004400281652824 



■ Place for response file - 
Filename: | 



Start 



JnJxJ 



Browse 



Browse 



Close Help 



v To create the Requests, click Start. 

vi When the file for certificate restore has been created, send it to Nokia as an e-mail attachment. 

Restore certificate. 

For this procedure, you must supply +12 V to CU-4 from an external power supply. 

i Save the reply file sent by Nokia to your computer. 

ii Start Phoenix service software. 

iii Choose File^Scan Product . 
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iv From the Tools menu, choose Certificate Restore and select Process a response file in the Action 
pane. 



'\% Certificate Restore 



.Jn|x| 



Action 
C Generate a request file 

(♦ process a response file- 



■Place for request file — 



Filename: |C:\Temp\IMEI\004400281652824.ask 



Browse 



Place for response file 
Filename: 



Browse 



Start 



] 



Close 



Help 



v To choose the location where response file is saved, click Browse. 
vi Click Open. 



GSI 



.Zjx| 




Look in | JIMEI 

=1 uu 44a::?iilo52:::;4 ail 



~z\ f Htf& 



File name: 
Files of lype: 



|rj04400281652824.RPL 


H 




JRpI files l".rpl) 


d 


l~~ Open as readonly 





Open 



The name of the file and the path where it is located are shown, 
vii To write the file to phone, click Start. 



'\% Certificate Restore 


-|n| xl 












("" Generate a request file 








(♦ process a response file? 
















Filename: |CATempMME]\0044Q0281652824.ask 


Browse 






_. . ... 












Filename: |C:Uemp\IMEI\004400281652824.RPL 


Browse 
















Start Close Help 















Next actions 

After a successful rewrite, you must retune the phone completely by using Phoenix tuning functions. 
Important: Perform all tunings: RF, BB, and UI. 
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Energy management calibration 

Prerequisites 

Energy Management (EM) calibration is performed to calibrate the setting (gain and offset) of AD converters 
in several channels (that is, battery voltage, BSI, battery current) to get an accurate AD conversion result. 

Hardware setup: 

• An external power supply is needed. 

• Supply 12V DC from an external power supply to CU-4 to power up the phone. 

• The phone must be connected to a CU-4 control unit with a product-specific flash adapter. 



Steps 



1. 

2. 
3. 
4. 
5. 

6. 
7. 



Place the phone to the docking station adapter (CU-4 is connected to the adapter). 

Start Phoenix service software. 

Choose File— > Scan Product. 

Choose Tuning Energy Management Calibration. 

To show the current values in the phone memory, click Read, and check that communication between 
the phone and CU-4 works. 

Check that the CU-4 used check box is checked. 

Select the item(s) to be calibrated. 

Note: ADC calibration has to be performed before other item(s). However, if all calibrations are 
selected at the same time, there is no need to perform the ADC calibration first. 

Click Calibrate. 

The calibration of the selected item(s) is carried out automatically. 

The candidates for the new calibration values are shown in the Calculated values column. If the new 
calibration values seem to be acceptable (please refer to the following "Calibration value limits" table), 
click Write to store the new calibration values to the phone permanent memory. 

Table 13 Calibration value limits 



Parameter 


Min. 




Max. 


ADC Offset 


-20 


20 


ADC Gain 


12000 


14000 


BSI Gain 


1100 


1300 


VBAT Offset 


2400 


2650 


VBAT Gain 


19000 


23000 


VCHAR Gain 


N/A 


N/A 


IBAT (ICal) Gain 


7750 


12250 



9. Click Read, and confirm that the new calibration values are stored in the phone memory correctly. If the 
values are not stored to the phone memory, click Write and/or repeat the procedure again. 

10. To end the procedure, close the Energy Management Calibration window. 
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■ Introduction to RF troubleshooting 

On the following pages you will find a step-by-step troubleshooting procedure and reference measurements 
at the relevant signal points. For functional descriptions, please refer to the System module section. 

Notes on reference measurements 

All measurements must be done using: 

• spectrum analyser with a high-frequency high-impedance passive probe (LO-/reference frequencies and 
RF power levels) 

• oscilloscope with a 10:1 probe (DC-voltages and low frequency signals) 

Important: All measurements with an RF coupler must be performed in an RF shielded environment, 
or where there are no transmissions on the same frequencies. This may disturb sensitive receiver 
measurements. 

Repairing this phone - important 

The RF section of the phone is built around one RF ASIC. Before changing the RF ASIC, please make sure that 
supply voltages and serial communication coming from baseband to RF are OK. 

Please note that the grounding of the FEM module is directly below the FEM module. Therefore, it is difficult 
to check or change the module. 

Most RF semiconductors are static discharge sensitive! ESD protection must be taken care of during repair 
(ground straps and ESD soldering irons). The RF ASIC and FEM are moisture sensitive, so parts must be pre- 
baked prior to soldering. 

In addition to key components, there are lot of discrete components (resistors, inductors and capacitors) 
which troubleshooting is done mainly by checking if the soldering of the component is done properly. 

Capacitor can be checked for shorts and resistors for value by means of an ohmmeter, but be aware in-circuit 
measurements should be evaluated carefully. 

Keep in mind that all measured voltages or RF levels depicted in the service manual are rough figures. 
Especially RF levels vary because of different measuring equipment or different grounding of the probe used. 

When using an RF probe, use a pair of metallic tweezers to connect the probe ground to the PWB ground as 
close to the measurement point as possible. If measurements are performed in a product specific module 
jig, then "GND" pads should be used for the probe ground. 
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Figure 16 RF key components, bottom side 
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10 RX 
_'i.M_ 

Z7501 850/900 RX filter 

500 VCO Balun 



G7500 



Z7502 850/900 TX Switch Filter 



N7500 RFIC Ahne T7500 TX Balun 



Figure 17 RF key components, top side 
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Figure 18 Some RF test points 



Receiver troubleshooting 



Introduction to RX troubleshooting 

Rx can be tested by making a phone call or in the local mode. For the local mode testing, use Phoenix service 
software. 

The main Rx troubleshooting measurement is RSSI measurement. This test measures the signal strength of 
the received signal. I and Q branches can be measured separately. 

In GSM, the input signal can be either a real GSM signal or a CW signal that is 67.771kHz up from the carrier 
frequency. 

For service tool usage instructions, refer to section Service Tools and Service Concepts. 
General instructions for RX troubleshooting 

Steps 

1. Connect a test jig to a computer with a FPS-10 flash prommer through F-Bus. 

Note: Make sure that you have a PKD-1 dongle connected to the computer's parallel port. 
Z. Connect test jig with DC supply voltage set to 4.0 V using Phoenix menu as shown next. 
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File Edit Product Flashing Testing Tuning | Tools Window Help 
I Operating mode: (73 ^ Read t Label Printing 



~3 Read | 



PPC/Fault Log Archive & 5end 

Options 

Smart Card Activator 

Manual CU-4 Initialization 

Certificate Restore 

Certificate Restore Tucson 

CU-4/ Terminal Current Consumption 

Product Code Change 



i.iifc«ffw*wwig ; 



'■'' 



Set Terminal Voltage - 



3000 mV 



- Get Terminal Cuirent 
Maximum 




Sampling Period(ms):|50 -rj 


Minimum: 







Average: 







Present Reading 





Read 






Finish 


Close Help 


Start 1 



Connect an RF cable between the RF connector of the module test jig and measurement equipment. 

Note: Make sure that all connections are made to the correct RF connector. 

Set Rxon. 

i Set the phone module to the test jig and start Phoenix service software. 

ii Initialize connection to the phone. (With the FPS-10 prommer use FPS10_USB or FPS10_TCP drivers, 
depending on connection type. When using DAU-9S select FBUS). 

iii From the File menu, choose product: File -> Choose Product -> xx-x* (* = type designator of the 
phone, eg. RM-164), or press Ctrl + R to scan product. 

iv From the toolbar, set operating mode to "Local". 

EGSM850/900/1800/1900 troubleshooting 

i From the Testing menu, activate the RF Controls window: Testing -> GSM -> RF Controls . 



Product Flashing 


Testing Tuning Tools 


Window Help 


mode: ] Local 


GSM 


► 1 RF Controls 


WCDMA 


► RSSI Readl^i 




ADC Reading 
Audio Control 




SNR Measurement 








Autocaller 








Bluetooth Locals 








Call Test 







In the RF Controls window: 

• Select band (Default = "GSM850"). 

• Set Active unit to "Rx" (Default ). 

• Set Operation mode to "Burst" (Default). 

• Set Rx/Tx channel (see table below). 

• Apply a frequency (see table below) to the RF-connector. 

Note: Remember to compensate for cable attenuation. You will find the values in the Service tools 
section. 

Apply a signal to the RF-connector. See values in the table below. 
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lannel (R) 
















GSM850 


190 


881.66771 


67.710 


-90 


GSM900 


37 


942.46771 


67.710 


-90 


GSM1800 


700 


1842.86771 


67.710 


-90 


GSM1900 


661 


1960.06771 


67.710 


-90 



% RF Controls 



^Jnjxj 



Close 



Figure 19 RF Controls window 



Receiver (RX) troubleshooting 



Common GSM RF Control Values 


Rx/Tx Channel: 
AFC: 




942.400000 


Active Unit: P x 


zJ 


|37 






Band: | GSM 900 z\ 


1° 






Operation Mode: | Burst 


d 








ha uoniroi values 


942.400000 






Monitor Channel: (37 


AGC: 1 








zl 




TV CnrAir.\ W=li ioj 


l a Lontrol values 




Tx Data T^pe: 
Tx Power Level: 






Edge: |0 ff 


d 


|aii 1 


zl 










Tx PA Mode: |High 


d 


l« 


zl 











Help 



Context 

Troubleshoot one band at a time. Start with GSM850 and end with GSM1900. 

Troubleshooting flow 

Apply a signal according to the table in General instructions for RX troubleshooting (page 4-8) 
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GSM850 



Apply the signal. 



Oscilloscope at RXIP 
signal 65 mVpp DC 
offset 0.75 V. Offsot 
frequency as above. 



OK 

_I_ 



-NOK* 



Sniff VCO at 4xRX Freq (wrf 

probe touch top of VCO can) 

Op Mode = Continuous 

Correct Freq? 



RX chain for GSM900 
is functional 



— r - 

OK 



— NOK»- 



Goto Synthesizer 
troubleshooting 



Change signal 
generator power 
level to -50 dBm. 



Spectrum analyzer: 

Signal level at 

L7403 = -68 dBm 



— Q*9> 



NOK 

T 



Replace N7500 



VBAT_PA at 
C7504 -3.7 V? 



\7 




— OK^ 



Replace N7501. 
If still not OK, 
replace Z7501 . 



GSM900 










Apply the signal. 






* 












Oscilloscope at RXIP 
signal 65 mVpp DC 
offset 0.75 V. Offset 
frequency as above. 


-NOK* 


Sniff VCO at 4xRX Freq (w/ 

probe touch top of VCO can) 

Op Mode = Continuous 

Correct Freq? 


-NOK*- 


Goto Synthesizer 
troubleshooting 




I 

OK 

T 




I 
OK 












RX chain for GSM900 
Is functional 




Change signal 
generator power 
level to -50 dBm. 




r* 
Spectrum analyzer: 
Signal level at 
L7402 ■ -86 dBm 

V j 


— OK^ 


Rcplace N7500 










1 
NOK 

T 








\ / 




c > 

VBAT PA at 
C7504 -3.7 V? 


— OK>- 


Replace N7501. 
If still not OK, 
replace Z7501. 


\ 


7 


1 
NOK 

T 






Continue on next page 


Check 
L7510 
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Continued from 
previous page 



GSM1800 



Apply the signal and 
set the phone to 

RXGSM1800. 



Oscilloscope at RXIP 
signal 65 mVpp DC 
offset 0.75 V. Offset 
frequency as above. 



— NOK* 



Sniff VCO at 2xRX Freq (w/ 

probe touch top of VCO can) 

Op Mode ■ Continuous 

Correct Freq? 



OK 



—r~ 

OK 



— NOK»- 



Goto Synthesizer 
troubleshooting 



RX chain for 

GSM1800 is 
functional. 



Change signal 
generator power 
level to -50 dBm. 



f \ 

Spectrum analyzer 

Signal level at 

L7501 = -88 dBm 



NOK 

? 



VBAT_PA at 
C7504 -3.7 V? 



— OK^ 



Replace N7500 



\7 



Replace N7501. 
If still not OK, 
replace Z7500. 



GSM1900 



Apply the signal and 

set the phone to 

RXGSM1900. 



NOK 

T 



Replace L7510 



Oscilloscope at RXIP 
signal 65 mVpp DC 
offset 0.75 V. Offset 
frequency as above. 



-NOK*. 



Sniff VCO at 2xRX Freq (w/ 

probe touch top of VCO can) 

Op Mode = Continuous 

Correct Freq? 



-NOK»» 



Goto Synthesizer 
troubleshooting 



OK 

_I_ 



RX chain functional. 
Go to Baseband 
troubleshooting. 



OK 
J- 



Change signal 
generator power 
level to -50 dBm. 



Spectrum analyzer: 

Signal level at 

L7500 = -88 dBm 



— OK^ 



NOK 

T 



Replace N7500 



VBAT_PA at 
C7504 -3.7 V? 



Replace N7501. 
If still not OK. 
roplace 27500. 



NOK 

T 



Replace L7510 
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GSM Rx chain activation for manual measurements / GSM RSSI measurement 

Context 

RSSI signal measurement is the main Rx troubleshooting measurement. The test measures the strength of 
the received signal. 

I and branches can be measured separately. In GSM, the input signal can be either a real GSM signal or a 
CW (Continuous Wave) signal that is 67.771 kHz above the carrier frequency. 
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Figure 20 Rx IQ test points 



Steps 

1. Start Phoenix service software. 

2. Choose Testing^GSM^RSSI Reading . 

3. Set the RF signal generator for a channel frequency +67.771 kHz in CW mode. 

Alternatively set the cellular tester downlink channel to the appropriate channel. Make sure that the tester 
is set to continuous mode, not to burst mode. 
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4. In the RSSI Reading window, select the appropriate band and channel 

Operating mode: Local 



Read V Change will 



Band: | GSM 900 jj 



Monitor Channel: 37 942.400000 



J Operation Mode: Burst H 



Rx/Tx Channel: 37 942 41 



% RSSI Reading 



HEE3 



Measuring mode 

(* Sum vector 
C fl branch 
f I branch 



Reading mode 



(* Conbnuous 
C Once 



RSSI level: [ -116.52 dBm 

Start ,. Close 



Help 



Figure 21 RSSI Reading window 
5. To start the measurement, activate GSM Rx chain, click Start. 

Results 

RSSI reading values of the selected band and channel are displayed. The RSSI level must be the same value 
as that which is set at the signal generator (-90 dBm). 

■ Transmitter troubleshooting 

General instructions for TX troubleshooting 

Context 

• Tx troubleshooting requires Tx operation. 

• Do not transmit on frequencies that are in use! 

• Transmitter can be controlled in the local mode for diagnostic purposes. 

• The most useful Phoenix tool for GSM transmitter testing is "RF Controls". 

• Tx IQ tuning and Tx power tuning can be also used in some cases. 

• Remember that retuning is not a fix! Phones are tuned correctly in production. 

The first set of steps instructs how to assemble the test setup. This setup is general for all Tx troubleshooting 
tasks. 

Alternative steps provide specific troubleshooting instructions for Phoenix service software. 

Caution: Never activate the GSM transmitter without a proper antenna load. There should be always 
50 0. load connected to the RF connector (antenna, RF-measurement equipment or at least Z W 
dummy load), otherwise the GSM Power amplifier may be damaged. 

Steps 

1. Connect a test jig to a computer with FPS-10 flash prommer with a USB cable. 
Make sure that you have a PKD-1 dongle connected to the computer's parallel port. 

2. Connect test jig with DC supply voltage set to 4V. 
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3. Connect an RF cable between the RF connector of the module test jig (MJ-133) and measurement 
equipment or alternatively use a 50 Q (at least Z W) dummy load in the module test jig RF connector, 
otherwise GSM may be damaged. 

Note: Make sure that all connections are made to the correct RF connector. 

Normally a spectrum analyser is used as measurement equipment. 

Note: The maximum input power of a spectrum analyser is +30 dBm. 

To prevent any damage, it is recommended to use 10 dB attenuator on the spectrum analyzer input. 

4. SetTxon. 

i Set the phone module to the test jig and start Phoenix service software. 

ii Initialize connection to the phone. (With the FPS-10 prommer use FPS10_USB or FPS10_TCP drivers, 
depending on connection type. When using DAU-9S select FBUS driver). 

iii From the File menu, choose product: File -> Choose Product -> xx-x* (* = type designator of the 
phone, RM-164), or pressCtrl + R to scan product. 

iv From the toolbar, set operating mode to Local. 

5. GSM850/900/1800/1900 troubleshooting 

i From the Testing menu, activate the RF Con trols window: Testing -> GSM -> RF Controls . 



Product Flashing Testing Tuning Tools Window Help 


mode: Local 


om 


WCDMA ► 

ADC Reading 

Audio Control 

Autocaller 

Bluetooth Locals 

Call Test 


RSSI Readied 
SNR Measurement 







In the RF Controls window: 

• Select band GSM850, GSM900 or GSM1800 or GSM1900 (Default = GSM850). 

• Set Active unit to Tx (Default = Rx). 

• Set Operation mode to Burst (Default). 

• Set Tx data type to AMI (Default). 

• Set Rx/Tx channel (see table below) 

• Set Edge to Off (Default). 

• Set Tx PA mode to High (Default). 

• Set power level (see table below) 



[tftff 




Channel (RX and T: 






TX power level 


GSM850 


190 


5 


GSM900 


37 


5 


GSM1800 


700 





GSM1900 


661 
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''& RF Controls 



^Jnjxj 



Common GSM RF Control Values 



Active Unit: 
Band: 
Operation Mode: 



3 

GSM 900 _3J 

Burst "^ 



Rx/Tx Channel: W 
AFC: |5~ 



897.400000 



RX Control Values 

Monitor Channel: j 942. 40C 

AGC: 



22 



TX Control Values 
Edge: 

Tx PA Mode: 



Close 



Figure 22 RF Controls window 



u 



Off ~Zi TxDataTipe: \^T ~3 
High ~3 Tx Power Level: W ~ l\ 



Help 
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Transceiver (TX) troubleshooting 
Troubleshooting flow 



T7500 input level 
~13dBm? 



NOK- 



NOK 




OK 

▼ 


Replace 
N7500 




Replace 
T7500 



TX troubleshooting 



Check transmitter max output power: 
GSM850: +32..+34 dBm @ 836.6 MHz 
GSM900: +32..+34 dBm @ 897.4 MHz 
GSM1800: +29..+31 dBm @ 1747.8 MHz 
GSM1900: +29..+31 dBm @ 1880.0 MHz 



— OK^ 



Check power levels 



— OK^ 



Check transmitter 



NOK 



NOK 



Tune all 
TX power levels 



TX signal found? 



-NOK- 



Check output signal 
on 500 MHz span. 

Make sure there is no 

signal on incorrect 

frequency. 



-NOK*- 



GSM 1800 
GSM 1900 



OK 



Go to synthesizer 
troubleshooting 



GSM850 
GSM900 



Check TX power 
with the RF probe at 

R7502/C7505. 
~ 20 dBm @ PCL=0? 



Check TX power 
with the RF probe at 

R7500. 
~ 8 dBm @ PCL=5? 



-NOK^ 



OK 



OK 



Replace Z7502 
and retest 



NOK 

_J_ 



Replace N7500 
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■ Synthesizer troubleshooting 
Synthesizer troubleshooting 



Synthesizer 
troubleshooting 



Phoenix 

ST_CDSP_TX_PLL_P 

HASE LOCK TEST 



Not ok 

T 



ok- 



Synthesizer is 
functional. Go to 

TX or RX 
troubleshooting 



Check VCTCXO 

G7501 38.4 MHz 

signal -800 mVpp at 

R7514 



-NOK»- 



OK 



Voltage at 
C7522 -2.8 V? 



OK 

_L_ 



-NOK*- 



Check R7510and 

go to Retu 
troubleshooting 



Replace G7501 



Measure 

VRCP1 C2230 and 

VRCP2 C2231 

-4.8 V? 

I 

OK 

T 



C7517-2.8V? 



-NOK^ 



Go to Retu 
troubleshooting 



-NOK^ 



OK 




L7512-3.7V? 



OK 

_L_ 



-NOK»- 



Replace L7512 
Check 3.7 V 



Replace N7500 



Check loop filter 
— NOKH components C7520, 
R7508, R7509, C7521 



Replace G7500 — NOK^ 



OK 

_L_ 



Replace N7500 
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■ RF tunings 

Introduction to RF tunings 

Important: Only perform RF tunings if: 

• one or more of the RF components have been replaced 

• flash memory chip is replaced or corrupted. 

RF calibration is always performed with the help of a product-specific module jig (MJ-133), never with an RF 
coupler. Using an RF coupler in the calibration phase will cause a complete mistuning of the RF part. 

Important: After RF component replacements, always use autotuning. Manual tunings are only 
required in rare cases. 

Cable and adapter losses 

RF cables and adapters have some losses. They have to be taken into account when the phone is tuned. As 
all RF losses are frequency dependent, the user has to act very carefully and understand the measurement 
setup. 

For RF attenuations of the module jig, please refer to the Service tools section. 

Auto tuning for BB5.0 

This phone can be tuned automatically. 

Autotune is designed to align the phone's RF part easier and faster. It performs calibrations, tunings and 
measurements of RX and TX. The results are displayed and logged in a result file, if initiated. 

Hardware set up 

Hardware requirements for auto tuning: 

• PC (Windows 2000/XP) with GPIB card 

• Power supply 

• Product specific module jig 

• Cables: XRF-1 (RF cable), USB cable, GBIP cable and DAU-9S 

• Signal analyser (TX), signal generator (RX) and RF-splitter orone device including all. 



o 






o 


RF cable 


o o o o o 


CMU200 


^PIB 






Module jig 

+ 

CU-4 

o o 




Phoenix SSW 

+ 

GPIB card 




cable 


USB 




















' 













r 




Power O 






s 


upply o 





















Figure 23 Auto tuning concept with CMU200 
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Phoenix preparations 

Install the phone specific data package, for example RM-164_dp_1.78_sw_sh3.26.exe. This defines phone 
specific settings.. 

Auto tuning procedure 

1 Make sure the phone (in the jig) is connected to the equipment. Else, some menus will not be shown in 
Phoenix. 

2 To go to autotune, select Tuning (Alt-U)> Auto-Tune (Alt-A) from the menu. 

3 Start autotuning, clicking the Tune button. 

■ System mode independent manual tunings 
RF channel filter calibration 

Context 

Rf channel filter calibration tunes the internal low pass filters of the RF ASIC, that limit the bandwidth of BB 
IQ signals. 

Table 14 Rf channel filter calibration tuning limits 







Min Typ 


Max 


Tx filter 





10 


31 


RX mixer 





13 


31 


Rx filter 





16 


31 



Steps 

1. From the Operating mode drop-down menu, set mode to Local. 

2. Choose Tuning Rf Channel Filter Calibration . 

3. Click Tune. 

4. To save the values to the PMM (Phone Permanent Memory) area, click Write. 

5. To close the Rf Channel Filter Calibration window, click Close. 

Results 



\% Rf Channel Filter Calibration 


k 




-|n|: 


<l 
















Cut-off Frecjuencies 


Rx filter: 








Tx filter: IDE 


Rx mixer: l'° 


lie 
















Tune Read 


Write 


Close 


Help 

















Figure 24 Rf channel filter calibration typical values 
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PA (power amplifier) detection 

Context 

The PA detection procedure detects which PA manufacturer is used for phone PAs. 

If a PA is changed or if the permanent memory (PMM) data is corrupted, PA detection has to be performed 
before Tx tunings. 

Steps 

1. From the Operating mode drop-down menu, set mode to Local. 

2. Choose Tuning^PA Detection . 

3. Click Tune. 

4. Check that the detected PA manufacturers are corresponding to the actual chips on the board. 

5. To end the procedure, click Close. 

■ GSM receiver tunings 
Rx calibration (GSM) 

Context 

Rx Calibration is used to find out the real gain values of the GSM Rx AGC system and tuning response of the 
AFC system (AFC D/A init value and AFC slope) 

Steps 

1. Connect the GSM connector of the module jig to a signal generator. 

2. Start Phoenix service software. 

3. From the Operating mode drop-down menu, set mode to Local. 

4. Choose Tuning^GSM^Rx Calibration . 
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5. Click Start. 



T % Phoenix 



File Edit Product Flashing Testing Tuning Tools Window Help 




6. Connect the signal generator to the phone, and set frequency and amplitude as instructed in the 
Rx Calibration with band EGSM900 (step 1-3) pop-up window. 

Important: The calibration uses a non-modulated CW signal. Increase the signal generator level by 
cable attenuation and module jig probe attenuation. 
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•- Phoenix 



File Edit Product Flashing Testing Tuning Tools Window Help 



-|D| X| 



Operating mode: Local 



Read 



ntiTiiiifiiF 



PM values: 



Afcv. 
Afc si 
Rssi 



'■Tuning step 1 of 3 - Rx Calibration with band EGS 



Set the Rf signal generator: 

Power level: 

-60 dBm 

Input signal frequency: 
942.467710 MHz 




Press OK to tune, press Cancel or ESC to exit tuning process. 



7. To perform the tuning, click OK. 

8. Check that the tuning values are within the limits specified in the following table: 





Table 15 RF tuning limits in Rx ce 


libration 










ESI 


EBB 


GSM850 


AFC Value (init) 


-200 


-80..40 


200 


dB 


AFC slope 





108..121 


200 


dB 


RSSI (AGC-0) 


106 


107..110 


114 


dB 


GSM900 


AFC Value (init) 


-200 


-105..62 


200 


dB 


AFC slope 





122 


200 


dB 


RSSI (AGC-0) 


106 


107...110 


114 


dB 


GSM1800 


RSSI (AGC-0) 


105 


105...109 


114 


dB 


GSM1900 


RSSI (AGC-0) 


105 


105...109 


114 


dB 
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9. Click Next to continue with GSM1800 Rx tuning. 



Rx Calibration 



Jojxj 



r Calibration values: 



Afc value 
Afc slope 
Rssi 



-46.000000 

127.000000 

107.000000 



"3 



d 



Next 



Start 



Abort 



Close 



Help 



Next actions 

Repeat steps 6 to 9for GSM1800 and GSM1900 

Rx band filter response compensation (GSM) 

Prerequisites 

Rx calibration must be performed before the Rx band filter response compensation. 

Context 

On each GSM Rx band, there is a band filter in front of the RF ASIC front end. The amplitude ripple caused by 
these filters causes ripple to the RSSI measurement, and therefore calibration is needed. 

The calibration has to be repeated for each GSM band. 

Steps 

1. Connect the GSM connector of the module jig to a signal generator. 

2. Start Phoenix service software. 

3. From the Operating mode drop-down menu, set mode to Local. 
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4. Select GSM900 band. 

5. Choose Tuning GSM Rx Band Filter Response Compensation 

6. Select Tuning mode: manual 

7. Click Start. 



T % Phoenix 



File Edit Product Flashing Testing Tuning Tools Window Help 



^jnjxj 



Operating mode: (Local _^_ Read 



r % Rx Band Filter Response Compensation 



^□^ 



Tuning Mode: (Manual 3 input Signal Level p60 3J 

Signal levels — 




Next 



Start 



Abort 



Close 



Help 



Connect the signal generator to the phone, and set frequency and amplitude as instructed in the RxBand 
Filter Response Compensation for EGSM900 'pop-up window, step 1-3. 



Tuning step 1 of 3 - Rx Band Filter Response Compensation for EGSM9' 



Manual Tuning - stage 1 of 9. 

Set the Rf signal generator: 

Power level: 

-60 dBm + cable attenuation 

Input signal frequency: 
923.26771 MHz 

Press OK to tune, press Cancel or ESC to exit tuning process. 

1 



*) 



OK 



Cancel 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 4 -25 



IMOKIA 

Care 



RM-164 
RF Troubleshooting and Manual Tuning Guide 



9. To perform tuning, click OK. 

10. Go through all 9 frequencies. The following table will be shown: 



f% Rx Band Filter Response Compensation 



^jnjxj 



Tuning Mode: f^ar Input Signal Level ; 

Signal levels 



Channel 


Input Frequency [MHz] 


Measured Level Difference [dB] 


965 


923.26771 


•0.328 


375 


925.26771 


•0.109 


987 


927.G6771 


0.422 


1009 


932.0G771 


0.422 


37 


942.46771 


0.000 


90 


953.06771 


-0.828 


114 


957.86771 


•0.969 


124 


959.86771 


■0.578 


13S 


962.26771 


•0.828 





Next 



Start 



Abort 



Close 



Help 



11. Check that the tuning values are within the limits specified in the following table: 



Min Typ Max Unit 


GSM850 


Ch. 118/867.26771 MHz 


-6 


-1 


2 


dB 


Ch. 128/869.26771 MHz 


-3 





2 


dB 


Ch. 140/871.66771 MHz 


-3 





2 


dB 


Ch. 172/878.06771 MHz 


-2 





2 


dB 


Ch. 190/881.66771 MHz 


-2 





2 


dB 


Ch. 217 /887.06771MHz 


-2 





2 


dB 


Ch. 241/891.86771 MHz 


-3 





2 


dB 


Ch. 251/893.86771 MHz 


-3 





2 


dB 


Ch. 261/895.86771 MHz 


-6 


-1 


-2 


dB 


GSM900 


Ch. 965 /923.26771MHz 


-6 


-1 


2 


dB 


Ch. 975 /925.26771MHz 


-3 





2 


dB 


Ch. 987 /927.66771MHz 


-3 





2 


dB 


Ch. 1009 /932.06771MHz 


-2 





2 


dB 
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Min 


Typ 


Max 


Unit 


Ch. 37 /942.46771MHz 


-2 





2 


dB 


Ch. 90 /953.06771MHz 


-2 





2 


dB 


Ch. 114 /957.86771MHz 


-3 





2 


dB 


Ch. 124 /959.86771MHz 


-3 





2 


dB 


Ch. 136 /962.26771MHz 


-6 


-1 


2 


dB 


GSM1800 


Ch. 497 /1802.26771MHz 


-6 


-1 


3 


dB 


Ch. 512 /1805.26771MHz 


-3 





3 


dB 


Ch. 535 /1809.86771MHz 


-3 





3 


dB 


Ch. 606 /1824.06771MHz 


-3 





3 


dB 


Ch. 700 /1842.86771MHz 


-3 





3 


dB 


Ch. 791 /1861.06771MHz 


-3 





3 


dB 


Ch. 870 /1876.86771MHz 


-3 





3 


dB 


Ch. 885 /1879.86771MHz 


-3 





3 


dB 


Ch. 908 /1884.46771MHz 


-6 


-1 


3 


dB 


GSM1900 


Ch. 496 /1927.06771MHz 


-6 


-1 


2 


dB 


Ch. 512 /1930.26771MHz 


-3 





2 


dB 


Ch. 537 /1935.26771MHz 


-3 





2 


dB 


Ch. 586 /1945.06771MHz 


-3 





2 


dB 


Ch. 661 /1960.06771MHz 


-3 





2 


dB 


Ch. 736 /1975.06771MHz 


-3 





2 


dB 


Ch. 794 /1986.66771MHz 


-3 





2 


dB 


Ch. 810 /1989.86771MHz 


-3 





2 


dB 


Ch. 835 /1994.86771MHz 


-6 


-1 


2 


dB 



12. If the values are within the limits, click Next to continue to the next band. 

Next actions 

Repeat the steps 8 to 12 for GSM1800 and GSM1900. 

■ GSM transmitter tunings 
Tx IQ tuning (GSM) 

Context 

The Tx path branches to I and signals at RF 1/0 modulator. Modulator and analog hardware located after 
it cause unequal amplitude and phase disturbance to I and signal paths. Tx IQ tuning balances the I and 
branches. 
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Tx IQ tuning must be performed for all GSM bands. 

Steps 

1. Start Phoenix service software. 

2. From the Operating mode drop-down menu, set mode to Local. 

3. Choose Tuning^GSM— >Tx IQ Tuning . 

4. Select Mode: Automatic. 



Xt Tx IQ Selftuning 



^jnjxj 



Sellings 
Channel: 








|190 


Power Level: 1 1 


d 







Tuning Values 








Band Dc Offset 1 


Dc Offset Q Amplitude Phase 






GSM850/Edge -0.144 


-0.576 -0.1 89.00 




6SM900/Edge -0.144 


-0.592 


-0.1 89.00 


GSM1800/Ed... 0.792 


-0.180 


0.1 94.00 


GSM1900/Ed... 0.900 


-0.160 


0.1 


93.00 














Tune Read 









Start 



Finish 



Close 



Help 



5. Select Band: GSM900 and click Start. 

6. Click Next to start GSM1800 band TX IQ tuning. 

7. Click Next to start GSM1900 band TX IQ tuning. 

8. ClickFinish and then Close. 



Next actions 

Tuning sliders should be close to the center of the scale after the tuning and within the limits specified in 
the following table. If they are not within the limits, check Tx IQ quality manually. 





I Itra 


| | 


GSM850 


I DC offset / DC 
offset 


-6 


-4 


6 


% 


Ampl 


-1 





1 


dB 


Phase 


85 


90 


95 


o 


GSM900 
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Min 


Typ 


Max 


Unit 


I DC offset / DC 
offset 


-6 


-4 


6 


% 


Ampl 


-1 





1 


dB 


Phase 


85 


90 


95 


o 


GSM1800/GSM1900 


I/O DC 


-6 


0.5 


6 


% 


Ampl 


-1 





1 


dB 


Phase 


95 


100 


110 


o 



Tx power level tuning (GSM) 

Context 

Because of variations at the IC (Integrated Circuit) process and discrete component values, the actual 
transmitter RF gain of each phone is different. Tx power level tuning is used to find out mapping factors 
called 'power coefficients'. These adjust the GSM transmitter output power to fulfill the specifications. 

For EDGE transmission, the bias settings of the GSM PA are adjusted in order to improve linearity. This affects 
the PA gain and hence the power levels have to be aligned separately for EDGE transmission. 

Tx power level tuning has to be performed on all GSM bands. 

Steps 

1. Connect the phone to a spectrum analyzer. 

2. Start Phoenix service software. 

3. From the Operating mode drop-down menu, set mode to Local. 

4. Choose Tuning— >GSM^Tx Power Level Tuning . 
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5. Click Start.l 



'% Tx Power Level Tuning 



- □ 



Settings 


Band |GSM850 


zl 


Freq.[MHz] |836.60 







Power Levels 



Power Level 


Value 


Target 


DAC 


-I 


14Coeff. 


0.2830 


15.0 


290 




15Coeff. 


0.2656 


13.0 


272 


16Coeff. 


0.2516 


11.0 


258 


17Coeff. 


0.2386 


9.0 


244 


18Coeff. 


0.2280 


7.0 


233 


19Coeff. 


i 0.21 66 


15.0 


1222 




Base Coeff. 


0.0869 




89 




2SlotThreshold 


7.0000 




7168 


2SlotCoefficient 


0.5596 


30.5 


573 


3SlotThreshold 


7.0000 




7168 


3SlotCoefficient 


0.5596 


30.5 


573 


4SlotThreshold 


7.0000 




7168 


4SlotCoefficient 


0.5596 


30.5 


573 


▼■ 


<l 






I ► 





Read 



Next 



Start 



Finish 



Close 



Help 



6. Set the spectrum analyzer for power level tuning: 



Frequency 


Channel frequency: 

• 836.6 MHz GSM850 

• 897.4MHz GSM900 

• 1747.8MHz GSM1800 

• 1880MHz GSM1900 


Span 


Hz 


Sweep time 


2ms 


Trigger 


Video triggering (-lOdBm) 
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Resolution BW 


3MHz 


Video BW 


3MHz 


Reference level offset 


sum cable attenuation with module jig 
attenuation 


Reference level 


33dBm 



A power meter with a peak power detector can be also used. Remember to take the attenuations into 
account. 

7. Adjust power for all bold power levels to correspond the Target dBm column by pressing + or - keys. 

8. If all bold power levels are adjusted, click Next to continue with GSM850 EDGE. 

9. Adjust power for all bold power levels to correspond the Target dBm column by pressing + or - keys. 

Next actions 

Continue tuning the bold power levels of the GSM900, GSM1800 and GSM1900 bands. You will see this 
message, if finished successfully: 



. Information 



3> 



The tuning is ready. 

All bands supported by the terminal were tuned successfully. 



OK 
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■ Phone description 

Introduction 

This chapter describes the baseband module including engine, power management, interfaces, audio etc. 

The baseband is based on BB5.0 with a RAPGSM main processor and Retu/Tahvo energy management. All 
blocks that require high voltage process are in Tahvo and all other in Retu. The RF part is based on the ASIC 
Ahne. 

RM-164 is a quadband phone operating on the GSM850/900/1800/1900 bands. 

The phone is a slide phone, with one main part and one top flexible PWB. 

Main board includes: BB and RF blocks, Bluetooth, etc. 

Flexible PWB includes: LCD display, keyboard and earpiece 

Characteristic components 



Function 


Name 


Item 


RF ASIC 


Ahne 


N7505 


Energy management 


Retu 
Tahvo 


D2200 
N2300 


Main processor 


RAPGSM 


D2800 


Memory 


Combo: 256 Mbit SDRAM, 256 Mbit NOR, 1Gb NAND flash 


D3000 


Front end module 


Power amplifier and Antenna Switch 


N7520 


Antenna 


Antenna module assy (in acoustic chamber) 


1226 


System connector 


Micro USB 


X2000 


Battery 


BP-5M, 3.7 V, 900mAh, Li-Polymer 




Fold detection 


1 MR sensor and 1 permanent magnet (IHF speaker) 


Sensor: N2400 
(flexible PWB) 


Bluetooth 


BC4-R0M 


N6000 


FM radio 


TEA57601, single chip 


N6000 


IHF Speaker 


In acoustic chamber 


B2101 


Earpiece 


7/11 


B2101 


Microphone 




B2201 


Vibra 


VIBRA MOTOR 


M2100 


Charger connector 


Micro USB 


X2000 


Camera 


2 Mpix SMIA85, no flash light 


X6600 


LED driver 




N2301 


RTC 




G3300 
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PWB overview 
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Flex overview 
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System block diagram 
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Board and module connections 



Earpiece 






A 
V 



Flexible PWB Module 

• Volume keys 

• MR sensor 

• Keyboard 

• Keyboard backlight LEDs 



Main 
display 
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Engine PWB module 
(Main board) 
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GSM 
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• RF block 

. Audio HW 

• 2MP camera 

• Connectivity HW 
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■ BT Antenna 
. BT ASIC 

• FM Radio ASIC 
< LED Drivers 
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■ Engine 

Engine modules 

The engine contains 

• RF module with Ahne ASIC 

• Main processor with integrated memory (Baseband) 

• Energy management - Retu and Tahvo (Baseband) 

• SDRAM, NOR and NAND flash memories 

RF engine 

The RF module performs the high frequency operations of the engine for GSM. In both transmitter and 
receiver, the modulator and demodulator operate at the channel frequency. 

The core components of the RF module are: 

• Ahne RF ASIC (application specific integrated circuit) 

• Front end module (FEM) module (Power amplifier and Antenna switch) 
The RF engine also includes: 

• Voltage controlled oscillators (VCO and VCTCXO) 

• SAW filters 

The baseband section controls the RF module through the serial bus, RFBus. This passes information about 
eg. frequency band and mode of operation. Ahne RF ASIC controls the mode of operation, and further sends 
control signals to the front end module. 

In addition to the RFBus there are other interface signals for the power control loop, VCTCXO control and for 
the modulated waveforms. 

Main processor 

The main processor in this device is RAPGSM, a BB5.0 ASIC. 
Some of its interfaces, processors and controllers are: 

General purpose UARTs 

Processor modules 

I2C (between ICs) interface 

GSM coder 

Interfaces to user interface, SIM and MMC 

Accessory interface 

Handling of RF-BB interface 

I/O voltage = 1.8 V, Core voltage <1.8 V 

Energy management 

Two ASICs manages the energy in the phone; Retu and Tahvo. Together they cover the analogue audio and 
energy management function needs. 

Tahvo 

All blocks that need a special silicon process are included in Tahvo. 
Tahvos main features are: 
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• Energy management control 

• Supply voltage generation 

• Charge control 

• Digital core supply 

• Current control for LED supply 

Retu 

The blocks that do not have special needs are included in Retu. 
Retu controls for example: 

• Audio block 

• SIM 

• FM radio 

Modes of operation 

The functional behavior can be divided into seven different states. Each of these states will affect the general 
functionality of the phone: 

• No supply 

• Backup 

• Power off 

• Reset 

• Power on 

• Deep sleep 

■ Battery and charging 

Battery 

• Type: BP-5M, Li-Polymer 

• Capacity: 900 mAh 

• BSI resistor nominal value: 75 kQ 

Battery temperature is measured on the NTC on the main board. 





BSI GND VBAT 

Figure 25 Battery BP-5M 
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Battery connector 

The battery connector has three poles: 

• BSI (Battery size indicator) 

• GND (Ground) 

• VBAT (Battery voltage) 

The BSI line is used to recognize the battery capacity by a battery internal pull down resistor. 



Charging 

This phone is charged through the micro USB connector. 




Figure 26 Micro USB charger plug 

Charging is controlled by energy management, and external components are needed to protect the baseband 
module against EMC, reverse polarity and transient frequency deviation. 

■ Test interface 

The test interface is placed on the main board, accessible when the battery is removed from the phone. The 
interface can be used for service and test purposes. 

VPP MBus GND 

o o o o o o o 



VBus FBusTxD FBusRxD RXD2 

Figure 27 Test interface 



Interfaces 



Micro USB system connector 

The Micro USBconnector is an interface between the phone and the accessories. The configuration may vary 
between different phone models. In this model it includes: 

• Audio 

• USB 

• Charging 
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trtftfljpypii) 

12 3 4 5 

^-= 

Figure 28 Micro USB connector pins 
Table 16 Micro USB connector pins and signals 




Pin # Signal Pin # Signal 


1 


USBVBUs 


4 


XMIC/FM Antenna 


2 


USB D-/FBus_TX/XEARL 


5 


Charge GND 


3 


USB D+/FBus_RX/XEARR 







FM radio 

This phone uses a single-chip electronically tuned FM stereo radio with low voltage application. 

FM 

antenna 

(in headset) 



N/ 



100 MHz 



Retu 



VAUX 



VIO 



SleepClk 



FM radio 



V 



T 

GND 
Figure 29 FM radio interface 



Left/Right Audio 



CBUS 



Retu 



A 



RAPGSM 
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Camera 



Control 



f 



CAMERA 



Cm 



i 



i 



A 


HARDWARE 
ACCELERATOR 


A 






( I2C 


I2C 


\ 

\ 


N 




K 


CCP ) 


CCP ] 


V 






V 



J. 



RAPGSM 



1.8 V 



DC/DC 
converter 



Control 



2.8 V 



2.8V 

Voltage 

Regulator 



VBat 



Figure 30 Camera interface 

This phone is equipped with a 2 megapixel camera. The module has only one operating mode; raw pixel data 
output. 

A hardware accelerator includes features like pixel defect correction, colour interpolation, image sharpness 
enhancement, selective noise filtering, cropping and scaling. The image can be JPEG-compressed in real-time. 
The hardware accelerator also performs sensor housekeeping functions such as automatic exposure and 
white balance controls. 

SIM 

The SIM interface is the electrical interface between the SIM card and the mobile phone engine. 
The data communication between the SIM card and the phone is asynchronous half duplex. 



RAP 



SIMCIkl 

SIMIOCtrM 

SIMIODal 



EM ASIC 



SIMCIkl 
SIMIOC1 
SIMIODal 



BSI 

SIMCIkCI 
SIMRstCI 
SIMDaCI 

VSIM1 



From battery contact 



SIMASIP 



5 C6 C7 P8| 
l] H 



Figure 31 SIM interface connections 
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SIM Logic level shifting 

The SIM interface can support 3V and 1.8V SIM cards. 

SIM Power up/down 

The SIM power up/down sequence is generated in Retu. This means that Retu generates the reset switch 
(RST) signal to the SIM. In addition, the SIMCardDet signal is connected to Retu. 

The SIM interface is powered up when the SIMCardDet signal indicates "card in". 
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■ User interface 
User interface 



Main board 



RAPGSM 



Camera 




Tahvo 



I PowerOnX GENOUT(0:3) | 



Power 



PWMTAHVO 



WLED driver 



KEYB_CMT() 



S_KEY_LED 
N_KEY_led (0:3) 



D LED 



Filters + 50 pin connector 



Flexible PWB 



Volume up 






MR 
Sensor 






Volume down 










Keyboard + LEDs 





Main LCD 



Figure 32 User interface block diagram 
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Display and display backlight 

The main display includes four white LEDs for display backlights inside of the display module. Display 
backlight current is monitored using LED driver feedback input. 

Keyboard and keyboard backlight 

Numeric keys, power and volume up/down keys are placed on the flexible PWB. 



Left 

Down 

Soft Left 

Send 



Soft Right 





Volume > 
Down 



GENIO 




38 


42 


39 


40 


41 


GND 






COLO 


C0L1 


C0L2 


C0L3 


C0L4 




32 


ROWO 




Up 


Select 


Left 


Right 




33 


R0W1 




Soft Left 


Send 


Down 


Soft Right 




34 


R0W2 


Volume 
Up 


1 


4 


7 


* 




35 


R0W3 


Volume 
Down 


2 


5 


8 







36 


R0W4 




3 


6 


9 


# 




PWRONX 














END 



There are six white LEDs placed on the keyboard PWB for illumination of the keyboard. Supply source for the 
display and directional key backlights is implemented using an external white LED driver. The driver increases 
battery voltage up to 13V. The numeric keypad LEDs are powered by a separate current source LED driver. 

Slide switch 

The detection of the position ofthe slide is made through a MRsensorand a magnet. The magnet is internal 
to the IHF speaker. 

When the slide fold is opened, the applied magnetic field is high. This is sensed by the MR Sensor. 
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■ Audio concept 

Audio hardware architecture 

The functional core of the audio hardware is built around two ASICs: RAPGSM engine ASIC and the mixed- 
signal ASIC Retu. 

Retu provides an interface for the transducers and the accessory connector. 

There are four audio transducers: 

• Dynamic earpiece 

• Dynamic speaker 

• Microphone module 

In addition to the audio transducers, Retu also provides an output for the dynamic vibra component. 



RAPGSM 



EardataL 

EardataR 
Micdata 



PMARP 
PMARN 



CBUS 



6 

Digital 
Microphone 



FM Radio 



Retu 



EarP 



Vibra 



HFSp 



Mic3P 



Mic3R 



XEARR 

XEARL 

Mic2B 

Mic2 



EAR 



z<s> 



a 



Vibra 



IHF 



Micro USB 
connector 



USBD+ 
USBD- 



Audio 
Switch 



FM ^ 
antenna^ | 

Figure 33 Audio block diagram 
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Internal microphone 

Internal microphone is used for HandPortable (HP) and Internal HandsFree (IHF) call modes. 
A digital microphone is connected to the RAPGSM's (D2800) input GENI071. 



N21CO 
MLVC2G66YZTR 




Figure 34 Digital internal microphone circuitry 

External microphone 

Galvanic accessories are connected to the system connector (Micro USB). 

Accessory audio mode is automatically enabled/disabled during connection/disconnection of dedicated 
phone accessories. 

Internal earpiece 

Internal earpiece is used for the HandPortable (HP) call mode. A dynamic earpiece capsule is connected to 
Retu's differential output EarP and EarN. 

Internal speaker (IHF) 

The internal speaker is used for Internal handsfree (IHF) call mode, ringing tones, and listening to music files. 

External earpiece 

All galvanic accessories are connected to the system connector (Micro USB). 

The accessory audio mode is automatically enabled/disabled during connection/disconnection of dedicated 
phone accessories. 

Vibra circuitry 

Vibra is used for vibra-alarm function. 



Issue 1 



COMPANY CONFIDENTIAL 
Copyright © 2007 Nokia. All rights reserved. 



Page 5 -19 



IMOKIA 

Care 



RM-164 
System module 



-JlilLKb^; 



h_£RIK3fct3l 



C21C5 
llfll 




R21Q6 



GND GND 

Figure 35 Vibra circuitry 



■ Connections 

USB interface 

USB (Universal serial bus) provides a wired connectivity between host PC and peripheral devices. 







Tahvo 




fc 


RAPGSM 


USB through 
Micro USB 


USB/FBUS 
*j tranceiver 
■ block 












if 







Figure 36 USB interface to engine 

The Nokia USB device solution is supported using the Wireless 2 Function Controller (W2FC) core. This core is 
included in the RAPGSM. The core completes several USB functions automatically and is controlled by the MCU. 

The USB solution is also compatible with USB 2.0, with a full speed of 12 Mbps. 

Bluetooth 

Bluetooth provides a fully digital link for communication between a master unit and one or more slave units. 

This bluetooth solution is a single chip solution. 

Bluetooth connects to RAPGSM on the GENIO bus. 

The Bluetooth module is provided with power from VBat. 
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A/D-converter 


Analog-to-digital converter 


ACI 


Accessory Control Interface 


ADC 


Analog-to-digital converter 


ADSP 


Application DPS (expected to run high level tasks) 


AGC 


Automatic gain control (maintains volume) 


ALS 


Ambient light sensor 


AMSL 


After Market Service Leader 


ARM 


Advanced RISC Machines 


ARPU 


Average revenue per user (per month or per year) 


ASIC 


Application Specific Integrated Circuit 


ASIP 


Application Specific Interface Protector 


B2B 


Board to board, connector between PWB and UI board 


BB 


Baseband 


BC02 


Bluetooth module made by CSR 


BIQUAD 


Bi-quadratic ,type of filter function) 


BSI 


Battery Size Indicator 


BT 


Bluetooth 


CBus 


MCU controlled serial bus connected to UPP_WD2,UEME and Zocus 


CCP 


Compact Camera Port 


CDSP 


Cellular DSP (expected to run at low levels) 


CLDC 


Connected limited device configuration 


CMOS 


Complimentary metal-oxide semiconductor circuit (low power consumption) 


COF 


Chip on Foil 


COG 


Chip on Glass 


CPU 


Central Processing Unit 


CSR 


Cambridge silicon radio 


CSTN 


Color Super Twisted Nematic 


CTSI 


Clock Timing Sleep and interrupt block of Tiku 


CW 


Continuous wave 


D/A-converter 


Digital-to-analouge converter 


DAC 


Digital-to-analouge converter 


DBI 


Digital Battery Interface 


DBus 


DSP controlled serial bus connected between UPP_WD2 and Helgo 


DCT-4 


Digital Core Technology 


DMA 


Direct memory access 


DP 


Data Package 
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DPLL 


Digital Phase Locked Loop 


DSP 


Digital Signal Processor 


DtoS 


Differential to Single ended 


EDGE 


Enhanced data rates for global/GSM evaluation 


EGSM 


Extended GSM 


EM 


Energy management 


EMC 


Electromagnetic compability 


EMI 


Electromagnetic interference 


ESD 


Electrostatic discharge 


FCI 


Functional cover interface 


FPS 


Flash Programming Tool 


FR 


Full rate 


FSTN 


Film compensated super twisted nematic 


GND 


Ground, conductive mass 


GPIB 


General-purpose interface bus 


GPRS 


General Packet Radio Service 


GSM 


Group Special Mobile/Global System for Mobile communication 


HF 


Hands free 


HFCM 


Handsfree Common 


HS 


Handset 


HSCSD 


High speed circuit switched data (data transmission connection fasterthan GSM) 


HW 


Hardware 


I/O 


Input/Output 


I BAT 


Battery current 


IC 


Integrated circuit 


KHAR 


Charger current 


IF 


Interface 


IHF 


Integrated hands free 


IMEI 


International Mobile Equipment Identity 


IR 


Infrared 


IrDA 


Infrared Data Associasion 


ISA 


Intelligent software architecture 


JPEG/JPG 


Joint Photographic Experts Group 


LCD 


Liquid Crystal Display 


LDO 


Low Drop Out 


LED 


Light-emitting diode 
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LPRF 


Low Power Radio Frequency 


MCU 


Micro Controller Unit (microprocessor) 


MCU 


Multiport control unit 


MIC, mic 


Microphone 


MIDP 


Mobile Information Device Profile 


MIN 


Mobile identification number 


MIPS 


Million instructions per second 


MMC 


Multimedia card 


MMS 


Multimedia messaging service 


NTC 


Negative temperature coefficient, temperature sensitive resistor used as a 
temperature sensor 


OMA 


Object management architechture 


OMAP 


Operations, maintenance, and administartion part 


Opamp 


Operational Amplifier 


PA 


Power amplifier 


PDA 


Pocket Data Application 


PDA 


Personal digital assistant 


PDRAM 


Program/Data RAM (on chip in Tiku) 


Phoenix 


Software tool of DCT4.X 


PIM 


Personal Information Management 


PLL 


Phase locked loop 


PM 


(Phone) Permanent memory 


PUP 


General Purpose 10 (PIO), USARTS and Pulse Width Modulators 


PURX 


Power-up reset 


PWB 


Printed Wiring Board 


PWM 


Pulse width modulation 


RC-filter 


Resistance-Capacitance filter 


RF 


Radio Frequency 


RFPopPortTM 


Reduced function PopPortTM interface 


RFBUS 


Serial control Bus For RF 


RSK 


Right Soft Key 


RS-MMC 


Reduced size Multi Media Card 


RSSI 


Receiving signal strength indicator 


RST 


Reset Switch 


RTC 


Real Time Clock (provides date and time) 


RX 


Radio Receiver 
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SARAM 


Single Access RAM 


SAW filter 


Surface Acoustic Wave filter 


SDRAM 


Synchronous Dynamic Random Access Memory 


SID 


Security ID 


SIM 


Subscriber Identity Module 


SMPS 


Switched Mode Power Supply 


SNR 


Signal-to-noice ratio 


SPR 


Standard Product requirements 


SRAM 


Static random access memory 


STI 


Serial Trace Interface 


SW 


Software 


SWIM 


Subscriber/Wallet Identification Module 


TCXO 


Temperature controlled Oscillator 


Tiku 


Finnish for Chip, Successor of the UPP 


TX 


Radio Transmitter 


UART 


Universal asynchronous receiver/transmitter 


UEME 


Universal Energy Management chip (Enhanced version) 


UEMEK 


See UEME 


UI 


User Interface 


UPP 


Universal Phone Processor 


UPP.WD2 


Communicator version of DCT4 system ASIC 


USB 


Universal Serial Bus 


VBAT 


Battery voltage 


VCHAR 


Charger voltage 


VCO 


Voltage controlled oscillator 


VCTCXO 


Voltage Controlled Temperature Compensated Crystal Oscillator 


VCXO 


Voltage Controlled Crystal Oscillator 


Vp-P 


Peak-to-peak voltage 


VSIM 


SIM voltage 


WAP 


Wireless application protocol 


WD 


Watchdog 


XHTML 


Extensible hypertext markup language 


Zocus 


Current sensor, (used to monitor the current flow to and from the battery) 
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